codeql/cpp/ql/test/library-tests/dataflow/source-sink-tests/sources-and-sinks.cpp

char *getenv(const char *name);
char *secure_getenv(const char *name);
wchar_t *_wgetenv(const wchar_t *name);

void test_getenv() {
    void *var1 = getenv("VAR"); // $ local_source=6:18 local_source=6:18
    void *var2 = secure_getenv("VAR"); // $ local_source=7:18 local_source=7:18
    void *var3 = _wgetenv(L"VAR"); // $ local_source=8:18 local_source=8:18
}

int send(int, const void*, int, int);

void test_send(char* buffer, int length) {
  send(0, buffer, length, 0); // $ remote_sink
}

struct iovec {
  void  *iov_base;
  unsigned iov_len;
};

int readv(int, const struct iovec*, int);
int writev(int, const struct iovec*, int);

void test_readv_and_writev(iovec* iovs) {
  readv(0, iovs, 16); // $ remote_source
  writev(0, iovs, 16); // $ remote_sink
}

struct FILE;

int fscanf(FILE *stream, const char *format, ...);
int scanf(const char *format, ...);

void test_scanf(FILE *stream, int *d, char *buf) {
  scanf(""); // Not a local source, as there are no output arguments
  fscanf(stream, ""); // Not a remote source, as there are no output arguments
  scanf("%d", d); // $ local_source
  fscanf(stream, "%d", d);  // $ remote_source
  scanf("%d %s", d, buf); // $ local_source=40:18 local_source=40:21
  fscanf(stream, "%d %s", d, buf);  // $ remote_source=41:27 remote_source=41:30
}

struct addrinfo;

int getaddrinfo(const char *hostname, const char *servname,
                const struct addrinfo *hints, struct addrinfo **res);

void test_inet(char *hostname, char *servname, struct addrinfo *hints) {
  addrinfo *res;
  int ret = getaddrinfo(hostname, servname, hints, &res); // $ remote_source
}

typedef unsigned int wint_t;

// getc variants
int getc(FILE *stream);
wint_t getwc(FILE *stream);
int _getc_nolock(FILE *stream);
wint_t _getwc_nolock(FILE *stream);

int getch(void);
int _getch(void);
wint_t _getwch(void);
int _getch_nolock(void);
wint_t _getwch_nolock(void);
int getchar(void);
wint_t getwchar();
int _getchar_nolock(void);
wint_t _getwchar_nolock(void);

void test_getchar(FILE *stream) {
  int a = getc(stream); // $ remote_source
  wint_t b = getwc(stream); // $ remote_source
  int c = _getc_nolock(stream); // $ remote_source
  wint_t d = _getwc_nolock(stream); // $ remote_source

  int e = getch(); // $ local_source
  int f = _getch(); // $ local_source
  wint_t g = _getwch(); // $ local_source
  int h = _getch_nolock(); // $ local_source
  wint_t i = _getwch_nolock(); // $ local_source
  int j = getchar(); // $ local_source
  wint_t k = getwchar(); // $ local_source
  int l = _getchar_nolock(); // $ local_source
  wint_t m = _getwchar_nolock(); // $ local_source
}

// ZMC networking library

typedef unsigned long size_t;

struct zmq_msg_t {
};
int zmq_msg_init(zmq_msg_t *msg);
int zmq_msg_recv(zmq_msg_t *msg, void *socket, int flags);
int zmq_recvmsg(void *socket, zmq_msg_t *msg, int flags); // deprecated
int zmq_recv(void *socket, void *buf, size_t len, int flags);

void test_zmc(void *socket) {
  zmq_msg_t msg1, msg2;
  char buffer[1024];

  if (zmq_recv(socket, buffer, sizeof(buffer), 0) >= 0) { // $ remote_source
    // ...
  }

  zmq_msg_init(&msg1);
  if (zmq_msg_recv(&msg1, socket, 0) >= 0) { // $ remote_source
    // ...
  }

  zmq_msg_init(&msg2);
  if (zmq_recvmsg(socket, &msg2, 0) >= 0) { // $ remote_source
    // ...
  }
}