Is it possible to determine the length of a matched char array and use
the length in a test?
For instance, add something like a test to show only the instances
where a src buffer overruns a dest buffer.
void foo(void)
{
char foo[5];
strcpy(foo, "fits");
}
it would be useful to see only the instances where the dest
buffer would be overrun like:
void foo(void)
{
char foo[5];
strcpy(foo, "doesn't fit");
}
---
This would find all instances of a constant src array into non-pointer dst:
@@
char [] dest;
constant char [] src;
@@
* strcpy(dest, src)
---
Is there a mexhanism like:
@@
char [] dest;
constant char [] src;
@@
when (some cocci grammar testing length(dest) < length(src))
* strcpy(dest, src)
_______________________________________________
Cocci mailing list
Cocci@systeme.lip6.fr
https://systeme.lip6.fr/mailman/listinfo/cocci
