]>
Commit | Line | Data |
---|---|---|
2a03c445 | 1 | char *sp (/*@untainted@*/ char *s1, /*@untainted@*/ char *s2, /*@tainted@*/ char *s3) |
2 | { | |
3 | char *s; | |
4 | s = (char *) malloc (sizeof (*s) * 100); | |
5 | assert (s != NULL); | |
6 | ||
7 | sprintf (s, "%s %d %s %d", s1, 3, s2, 3); | |
8 | (void) system (s); /* okay */ | |
9 | ||
10 | sprintf (s, "%s %d %s %d", s1, 3, s3, 3); | |
11 | (void) system (s); /* error */ | |
12 | ||
13 | sprintf (s, "%s %d %s %d %s %s %s", s1, 3, s2, 3, s2, s3, s2); | |
14 | (void) system (s); /* error */ | |
15 | ||
16 | return s; /* error */ | |
17 | } | |
18 |