Bug path

test_3
‘test_3’: events 1-2
25 char *password = getpass (">"); /* { dg-message "\\(1\\) sensitive value acquired here" } */
^~~~~~~~~~~~~
|
(1) sensitive value acquired here
26 printf ("got password %s\n", password); /* { dg-warning "sensitive value 'password' written to output file \\\[CWE-532\\\]" "warning" } */
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
(2) sensitive value ‘password’ written to output file; acquired at (1)