mirror of
https://github.com/github/codeql.git
synced 2026-04-30 11:15:13 +02:00
CPP: Add query for detecteing incorrect error checking for scanf
This commit is contained in:
@@ -429,3 +429,21 @@ void scan_and_static_variable() {
|
||||
scanf("%d", &i);
|
||||
use(i); // GOOD: static variables are always 0-initialized
|
||||
}
|
||||
|
||||
void bad_check() {
|
||||
{
|
||||
int i = 0;
|
||||
if (scanf("%d", &i) != 0) {
|
||||
return;
|
||||
}
|
||||
use(i); // GOOD [FALSE POSITIVE]: Technically no security issue, but code is incorrect.
|
||||
}
|
||||
{
|
||||
int i = 0;
|
||||
int r = scanf("%d", &i);
|
||||
if (!r) {
|
||||
return;
|
||||
}
|
||||
use(i); // GOOD [FALSE POSITIVE]: Technically no security issue, but code is incorrect.
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user