https://gcc.gnu.org/bugzilla/show_bug.cgi?id=109106
--- Comment #5 from Geoffrey <geoffreydgr at icloud dot com> --- (In reply to David Malcolm from comment #4) > Thanks for filing this, and for the comments; marking it as a dup of PR > 107017 > > *** This bug has been marked as a duplicate of bug 107017 *** Hi, David. I want to ask a question that does GSA supports printf now? The gcc online docs (https://gcc.gnu.org/onlinedocs/gcc/Static-Analyzer-Options.html#index-fanalyzer-checker) says that GSA has hardcoded knowledge about the behavior of this function. But I find that GSA still cannot handle printf (see https://godbolt.org/z/6ooW44sPq). Then I checked the source code, I find that you have modeled `sprintf`. I am wondering why GCC static analysis misses `printf`. IMO, it seems straightforward to model. Or actually it is hard to model?