[Bug middle-end/93514] missing warning on a strlen with a negative or just past-the-end offset

[msebor at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=93514

Martin Sebor <msebor at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |diagnostic
             Blocks|                            |56456

--- Comment #1 from Martin Sebor <msebor at gcc dot gnu.org> ---
The warning code should trigger for all calls to functions that expect string
arguments (certainly all such built-ins).

Diagnosing also calls to user-defined functions with past-the-end pointers
could cause false positives when they delineate a range, as in:

  void f (char *begin, char *end);

  void g (void)
  {
    char a[3];
    f (a, a + 3);
  }

It might be worth at least diagnosing calls to functions that take just one
pointer, or where all pointers are of different types or point to distinct
objects.


Referenced Bugs:

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=56456
[Bug 56456] [meta-bug] bogus/missing -Warray-bounds