[cfe-dev] Bogus warning

[Ted Kremenek]

This is a false positive.  Thanks for pointing it out!  I will add it  
to my queue of things to fix/improve.

On Dec 18, 2007, at 12:38 AM, Nico Weber wrote:

> Hi,
>
> this looks like a bug:
>
> s0539:src nico$ cat test.c
> #include "stdio.h"
>
> int main() {
>   char buf[1];
>   sprintf(buf, 1 ? "" : "");
> }
> s0539:src nico$ ./clang test.c
> running "/Users/nico/src/llvm-svn/Debug/bin/clang -fsyntax-only  
> test.c"
> test.c:5:16: warning: format string is not a string literal
> (potentially insecure)
>   sprintf(buf, 1 ? "" : "");
>   ~~~~~~~      ^
> 1 diagnostic generated.
>
> Nico
> _______________________________________________
> cfe-dev mailing list
> cfe-dev at cs.uiuc.edu
> http://lists.cs.uiuc.edu/mailman/listinfo/cfe-dev