Paolo Tranquilli c117a1e21f C++: demote VeryLikelyOverrunWrite cast results ...

There were some false positives where something like

    int x;
    // ...
    sprintf(buff, "%ld", (long)x);

was considered as if the parameter had a non-trivial range analysis only
because the range of `int` is smaller than the range for `long`, without
any non-trivial range analysis actually done on `x`.

These will now be reported by `OverrunWrite` instead.

2022-01-13 11:59:48 +00:00

..

CWE

C++: demote VeryLikelyOverrunWrite cast results

2022-01-13 11:59:48 +00:00