clang/test/Analysis/assume-controlled-environment.c

   1 // RUN: %clang_analyze_cc1 -verify=untrusted-env %s \
   2 // RUN:   -analyzer-checker=core                    \
   3 // RUN:   -analyzer-checker=alpha.security.taint    \
   4 // RUN:   -analyzer-checker=debug.TaintTest
   5
   6 // RUN: %clang_analyze_cc1 -verify %s -DEXPECT_NO_WARNINGS    \
   7 // RUN:   -analyzer-config assume-controlled-environment=true \
   8 // RUN:   -analyzer-checker=core                              \
   9 // RUN:   -analyzer-checker=alpha.security.taint              \
  10 // RUN:   -analyzer-checker=debug.TaintTest
  11
  12
  13 #ifdef EXPECT_NO_WARNINGS
  14 // expected-no-diagnostics
  15 #endif
  16
  17 char *getenv(const char *name);
  18
  19 void foo(void) {
  20   char *p = getenv("FOO"); // untrusted-env-warning {{tainted}}
  21   (void)p;                 // untrusted-env-warning {{tainted}}
  22 }