11 | char *password = getpass (">"); /* { dg-message "\\(1\\) sensitive value acquired here" } */ |
| ^~~~~~~~~~~~~ |
| | |
| (1) sensitive value acquired here |
12 | fprintf (logfile, "got password %s\n", password); /* { dg-warning "sensitive value 'password' written to output file \\\[CWE-532\\\]" "warning" } */ |
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| | |
| (2) sensitive value ‘password’ written to output file; acquired at (1) |