|    19 |   char *password = getpass (">"); /* { dg-message "\\(1\\) sensitive value acquired here" } */ | 
 |                    ^~~~~~~~~~~~~ | 
 |                    | | 
 |                    (1) sensitive value acquired here | 
|    20 |   printf ("got password %s\n", password); /* { dg-warning "sensitive value 'password' written to output file \\\[CWE-532\\\]" "warning" } */ | 
 |   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | 
 |   | | 
 |   (2) sensitive value ‘password’ written to output file; acquired at (1) |