Bug path

‘test_3’: events 1-2
19 char *password = getpass (">"); /* { dg-message "\\(1\\) sensitive value acquired here" } */
^~~~~~~~~~~~~
|
(1) sensitive value acquired here
20 printf ("got password %s\n", password); /* { dg-warning "sensitive value 'password' written to output file \\\[CWE-532\\\]" "warning" } */
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
(2) sensitive value ‘password’ written to output file; acquired at (1)