[Bug analyzer/105899] New: RFE: -fanalyzer could complain about misuses of standard C string APIs

[dmalcolm at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105899

            Bug ID: 105899
           Summary: RFE: -fanalyzer could complain about misuses of
                    standard C string APIs
           Product: gcc
           Version: 12.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: analyzer
          Assignee: dmalcolm at gcc dot gnu.org
          Reporter: dmalcolm at gcc dot gnu.org
            Blocks: 105887
  Target Milestone: ---

See:
  https://clang.llvm.org/docs/analyzer/checkers.html
    1.2.13.8. alpha.unix.cstring.NotNullTerminated (C)
    1.2.13.9. alpha.unix.cstring.OutOfBounds (C)
    1.2.13.10. alpha.unix.cstring.UninitializedRead (C)

Difficult to implement if we do the general case; but fairly easy for detecting
the "definitely happens" cases, I think.


Referenced Bugs:

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105887
[Bug 105887] RFE: clang analyzer warnings that GCC's -fanalyzer could implement