Background: Bug 18412 suggests that the compiler should issue a
security warning when a scanf %s format specifier does not
include a field width.  This is the third patche working toward
this (r202114, 204300).

This patch adds the actual warning. The warning is part of the
FormatSecurity warning group.

Example:

    test.c:14:10: warning: no field width in scanf string format
specifier (potentially insecure)
      scanf("%s", str);
             ^~

Presently one of the tests in test/Sema/format-strings-scanf.c
fails due to the way the tests are executed (the file is
re-compiled with the -Wformat=0 option). I would appreciate any
advice on fixing this test case.

Attachment: 18412.patch
Description: Binary data

_______________________________________________
cfe-commits mailing list
[email protected]
http://lists.cs.uiuc.edu/mailman/listinfo/cfe-commits

Reply via email to