Incorrect taint of arrays / pointers

[llvmbot]

Bugzilla Link	23551
Version	unspecified
OS	All
Reporter	LLVM Bugzilla Contributor

Extended Description

There are problems in GenericTaintChecker.cpp checker:

include

int main() { char buf[256]; scanf("%s", buf); FILE *f = fopen(buf, "r"); // buf is tainted but no warnings generate }

However in other situation checker works properly:

include

int main() { char buf[256]; scanf("%s", buf); FILE f = fopen((char )buf[0], "r"); // Warning: tainted! }

Buuut:

include

int main() { char buf[256]; scanf("%s", buf); FILE f = fopen((char )buf[1], "r"); // Not working again! }

Any ideas, except for taint pointers itself? :)

[llvmbot]

assigned to @tkremenek