[splint.git] / test / tainted / sprintf.c

char *sp (/*@untainted@*/ char *s1, /*@untainted@*/ char *s2, /*@tainted@*/ char *s3)
{
  char *s;
  s = (char *) malloc (sizeof (*s) * 100);
  assert (s != NULL);

  sprintf (s, "%s %d %s %d", s1, 3, s2, 3);
  (void) system (s); /* okay */

  sprintf (s, "%s %d %s %d", s1, 3, s3, 3);
  (void) system (s); /* error */

  sprintf (s, "%s %d %s %d %s %s %s", s1, 3, s2, 3, s2, s3, s2);
  (void) system (s); /* error */

  return s; /* error */
}
Commit	Line	Data
2a03c445	1	char sp (/@untainted@/ char s1, /@untainted@/ char s2, /@tainted@/ char s3)
	2	{
	3	char *s;
	4	s = (char ) malloc (sizeof (s) * 100);
	5	assert (s != NULL);
	6
	7	sprintf (s, "%s %d %s %d", s1, 3, s2, 3);
	8	(void) system (s); /* okay */
	9
	10	sprintf (s, "%s %d %s %d", s1, 3, s3, 3);
	11	(void) system (s); /* error */
	12
	13	sprintf (s, "%s %d %s %d %s %s %s", s1, 3, s2, 3, s2, s3, s2);
	14	(void) system (s); /* error */
	15
	16	return s; /* error */
	17	}
	18