25 | char *password = getpass (">"); /* { dg-message "\\(1\\) sensitive value acquired here" } */ |
| ^~~~~~~~~~~~~ |
| | |
| (1) sensitive value acquired here |
26 | printf ("got password %s\n", password); /* { dg-warning "sensitive value 'password' written to output file \\\[CWE-532\\\]" "warning" } */ |
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| | |
| (2) sensitive value ‘password’ written to output file; acquired at (1) |