23 lines · c
1// RUN: %clang_analyze_cc1 -verify=untrusted-env %s \2// RUN: -analyzer-checker=core \3// RUN: -analyzer-checker=optin.taint \4// RUN: -analyzer-checker=debug.TaintTest5 6// RUN: %clang_analyze_cc1 -verify %s -DEXPECT_NO_WARNINGS \7// RUN: -analyzer-config assume-controlled-environment=true \8// RUN: -analyzer-checker=core \9// RUN: -analyzer-checker=optin.taint \10// RUN: -analyzer-checker=debug.TaintTest11 12 13#ifdef EXPECT_NO_WARNINGS14// expected-no-diagnostics15#endif16 17char *getenv(const char *name);18 19void foo(void) {20 char *p = getenv("FOO"); // untrusted-env-warning {{tainted}}21 (void)p; // untrusted-env-warning {{tainted}}22}23