18 lines · plain
1.. title:: clang-tidy - clang-analyzer-security.PutenvStackArray2.. meta::3 :http-equiv=refresh: 5;URL=https://clang.llvm.org/docs/analyzer/checkers.html#security-putenvstackarray-c4 5clang-analyzer-security.PutenvStackArray6========================================7 8Finds calls to the putenv function which pass a pointer to a stack-allocated9(automatic) array as the argument. Function putenv does not copy the passed10string, only a pointer to the data is stored and this data can be read even by11other threads. Content of a stack-allocated array is likely to be overwritten12after exiting from the function.13 14The `clang-analyzer-security.PutenvStackArray` check is an alias, please see15`Clang Static Analyzer Available Checkers16<https://clang.llvm.org/docs/analyzer/checkers.html#security-putenvstackarray-c>`_17for more information.18