https://gcc.gnu.org/bugzilla/show_bug.cgi?id=109106

--- Comment #5 from Geoffrey <geoffreydgr at icloud dot com> ---
(In reply to David Malcolm from comment #4)
> Thanks for filing this, and for the comments; marking it as a dup of PR
> 107017
> 
> *** This bug has been marked as a duplicate of bug 107017 ***

Hi, David. I want to ask a question that does GSA supports printf now?

The gcc online docs
(https://gcc.gnu.org/onlinedocs/gcc/Static-Analyzer-Options.html#index-fanalyzer-checker)
says that GSA has hardcoded knowledge about the behavior of this function. But
I find that GSA still cannot handle printf (see
https://godbolt.org/z/6ooW44sPq). Then I checked the source code, I find that
you have modeled `sprintf`. 
I am wondering why GCC static analysis misses `printf`. IMO, it seems
straightforward to model. Or actually it is hard to model?

Reply via email to