2 * This file is part of cparser.
3 * Copyright (C) 2007-2009 Matthias Braun <matze@braunis.de>
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License
7 * as published by the Free Software Foundation; either version 2
8 * of the License, or (at your option) any later version.
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
15 * You should have received a copy of the GNU General Public License
16 * along with this program; if not, write to the Free Software
17 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
25 #include "format_check.h"
29 #include "diagnostic.h"
33 #include "lang_features.h"
35 typedef enum format_flag_t {
37 FMT_FLAG_HASH = 1U << 0,
38 FMT_FLAG_ZERO = 1U << 1,
39 FMT_FLAG_MINUS = 1U << 2,
40 FMT_FLAG_SPACE = 1U << 3,
41 FMT_FLAG_PLUS = 1U << 4,
42 FMT_FLAG_TICK = 1U << 5
45 typedef unsigned format_flags_t;
47 typedef enum format_length_modifier_t {
58 /* only in microsoft mode */
63 } format_length_modifier_t;
65 typedef struct format_spec_t {
66 const char *name; /**< name of the function */
67 format_kind_t fmt_kind; /**< kind */
68 unsigned fmt_idx; /**< index of the format string */
69 unsigned arg_idx; /**< index of the first argument */
72 static const char* get_length_modifier_name(const format_length_modifier_t mod)
74 static const char* const names[] = {
85 /* only in microsoft mode */
88 [FMT_MOD_I32] = "I32",
91 assert((size_t)mod < lengthof(names));
95 static void warn_invalid_length_modifier(const source_position_t *pos,
96 const format_length_modifier_t mod,
97 const utf32 conversion)
99 char const *const lmod = get_length_modifier_name(mod);
100 warningf(WARN_FORMAT, pos, "invalid length modifier '%s' for conversion specifier '%%%c'", lmod, conversion);
104 * Check printf-style format. Returns number of expected arguments.
106 static int internal_check_printf_format(const expression_t *fmt_expr,
107 const call_argument_t *arg,
108 const format_spec_t *spec)
110 while (fmt_expr->kind == EXPR_UNARY_CAST_IMPLICIT) {
111 fmt_expr = fmt_expr->unary.value;
115 * gettext results in expressions like (X ? "format_string" : Y)
116 * we assume the left part is the format string
118 if (fmt_expr->kind == EXPR_CONDITIONAL) {
119 conditional_expression_t const *const c = &fmt_expr->conditional;
120 expression_t const * t = c->true_expression;
123 int const nt = internal_check_printf_format(t, arg, spec);
124 int const nf = internal_check_printf_format(c->false_expression, arg, spec);
125 return nt > nf ? nt : nf;
128 if (fmt_expr->kind != EXPR_STRING_LITERAL
129 && fmt_expr->kind != EXPR_WIDE_STRING_LITERAL)
132 const char *string = fmt_expr->literal.value.begin;
133 size_t size = fmt_expr->literal.value.size;
134 const char *c = string;
136 const source_position_t *pos = &fmt_expr->base.source_position;
137 unsigned num_fmt = 0;
138 unsigned num_args = 0;
140 for (fmt = *c; fmt != '\0'; fmt = *(++c)) {
146 warningf(WARN_FORMAT, pos, "dangling %% in format string");
155 format_flags_t fmt_flags = FMT_FLAG_NONE;
158 fmt_flags |= FMT_FLAG_ZERO;
161 /* argument selector or minimum field width */
165 } while (isdigit(fmt));
167 /* digit string was ... */
169 /* ... argument selector */
170 fmt_flags = FMT_FLAG_NONE; /* reset possibly set 0-flag */
174 /* ... minimum field width */
180 case '#': flag = FMT_FLAG_HASH; break;
181 case '0': flag = FMT_FLAG_ZERO; break;
182 case '-': flag = FMT_FLAG_MINUS; break;
183 case '\'': flag = FMT_FLAG_TICK; break;
186 if (fmt_flags & FMT_FLAG_PLUS) {
187 warningf(WARN_FORMAT, pos, "' ' is overridden by prior '+' in conversion specification %u", num_fmt);
189 flag = FMT_FLAG_SPACE;
193 if (fmt_flags & FMT_FLAG_SPACE) {
194 warningf(WARN_FORMAT, pos, "'+' overrides prior ' ' in conversion specification %u", num_fmt);
196 flag = FMT_FLAG_PLUS;
199 default: goto break_fmt_flags;
201 if (fmt_flags & flag) {
202 warningf(WARN_FORMAT, pos, "repeated flag '%c' in conversion specification %u", (char)fmt, num_fmt);
209 /* minimum field width */
214 warningf(WARN_FORMAT, pos, "missing argument for '*' field width in conversion specification %u", num_fmt);
217 const type_t *const arg_type = arg->expression->base.type;
218 if (arg_type != type_int) {
219 warningf(WARN_FORMAT, pos, "argument for '*' field width in conversion specification %u is not an 'int', but an '%T'", num_fmt, arg_type);
223 while (isdigit(fmt)) {
236 warningf(WARN_FORMAT, pos, "missing argument for '*' precision in conversion specification %u", num_fmt);
239 const type_t *const arg_type = arg->expression->base.type;
240 if (arg_type != type_int) {
241 warningf(WARN_FORMAT, pos, "argument for '*' precision in conversion specification %u is not an 'int', but an '%T'", num_fmt, arg_type);
245 /* digit string may be omitted */
246 while (isdigit(fmt)) {
252 /* length modifier */
253 format_length_modifier_t fmt_mod;
259 fmt_mod = FMT_MOD_hh;
269 fmt_mod = FMT_MOD_ll;
275 case 'L': fmt = *(++c); fmt_mod = FMT_MOD_L; break;
276 case 'j': fmt = *(++c); fmt_mod = FMT_MOD_j; break;
277 case 't': fmt = *(++c); fmt_mod = FMT_MOD_t; break;
278 case 'z': fmt = *(++c); fmt_mod = FMT_MOD_z; break;
279 case 'q': fmt = *(++c); fmt_mod = FMT_MOD_q; break;
283 fmt = *(++c); fmt_mod = FMT_MOD_w;
285 fmt_mod = FMT_MOD_NONE;
290 fmt = *(++c); fmt_mod = FMT_MOD_I;
295 fmt_mod = FMT_MOD_I32;
300 } else if (fmt == '6') {
304 fmt_mod = FMT_MOD_I64;
311 fmt_mod = FMT_MOD_NONE;
315 fmt_mod = FMT_MOD_NONE;
320 type_t *expected_type;
321 type_qualifiers_t expected_qual = TYPE_QUALIFIER_NONE;
322 format_flags_t allowed_flags;
327 case FMT_MOD_NONE: expected_type = type_int; break;
328 case FMT_MOD_hh: expected_type = type_int; break; /* TODO promoted signed char */
329 case FMT_MOD_h: expected_type = type_int; break; /* TODO promoted short */
330 case FMT_MOD_l: expected_type = type_long; break;
331 case FMT_MOD_ll: expected_type = type_long_long; break;
332 case FMT_MOD_j: expected_type = type_intmax_t; break;
333 case FMT_MOD_z: expected_type = type_ssize_t; break;
334 case FMT_MOD_t: expected_type = type_ptrdiff_t; break;
335 case FMT_MOD_I: expected_type = type_ptrdiff_t; break;
336 case FMT_MOD_I32: expected_type = type_int32; break;
337 case FMT_MOD_I64: expected_type = type_int64; break;
340 warn_invalid_length_modifier(pos, fmt_mod, fmt);
343 allowed_flags = FMT_FLAG_MINUS | FMT_FLAG_SPACE | FMT_FLAG_PLUS | FMT_FLAG_ZERO;
349 allowed_flags = FMT_FLAG_MINUS | FMT_FLAG_HASH | FMT_FLAG_ZERO;
350 goto eval_fmt_mod_unsigned;
353 allowed_flags = FMT_FLAG_MINUS | FMT_FLAG_ZERO;
354 eval_fmt_mod_unsigned:
356 case FMT_MOD_NONE: expected_type = type_unsigned_int; break;
357 case FMT_MOD_hh: expected_type = type_int; break; /* TODO promoted unsigned char */
358 case FMT_MOD_h: expected_type = type_int; break; /* TODO promoted unsigned short */
359 case FMT_MOD_l: expected_type = type_unsigned_long; break;
360 case FMT_MOD_ll: expected_type = type_unsigned_long_long; break;
361 case FMT_MOD_j: expected_type = type_uintmax_t; break;
362 case FMT_MOD_z: expected_type = type_size_t; break;
363 case FMT_MOD_t: expected_type = type_uptrdiff_t; break;
364 case FMT_MOD_I: expected_type = type_size_t; break;
365 case FMT_MOD_I32: expected_type = type_unsigned_int32; break;
366 case FMT_MOD_I64: expected_type = type_unsigned_int64; break;
369 warn_invalid_length_modifier(pos, fmt_mod, fmt);
383 case FMT_MOD_l: /* l modifier is ignored */
384 case FMT_MOD_NONE: expected_type = type_double; break;
385 case FMT_MOD_L: expected_type = type_long_double; break;
388 warn_invalid_length_modifier(pos, fmt_mod, fmt);
391 allowed_flags = FMT_FLAG_MINUS | FMT_FLAG_SPACE | FMT_FLAG_PLUS | FMT_FLAG_HASH | FMT_FLAG_ZERO;
395 if (fmt_mod != FMT_MOD_NONE) {
396 warn_invalid_length_modifier(pos, fmt_mod, fmt);
399 expected_type = type_wchar_t;
400 allowed_flags = FMT_FLAG_NONE;
404 expected_type = type_int;
406 case FMT_MOD_NONE: expected_type = type_int; break; /* TODO promoted char */
407 case FMT_MOD_l: expected_type = type_wint_t; break;
408 case FMT_MOD_w: expected_type = type_wchar_t; break;
411 warn_invalid_length_modifier(pos, fmt_mod, fmt);
414 allowed_flags = FMT_FLAG_NONE;
418 if (fmt_mod != FMT_MOD_NONE) {
419 warn_invalid_length_modifier(pos, fmt_mod, fmt);
422 expected_type = type_wchar_t_ptr;
423 expected_qual = TYPE_QUALIFIER_CONST;
424 allowed_flags = FMT_FLAG_MINUS;
429 case FMT_MOD_NONE: expected_type = type_char_ptr; break;
430 case FMT_MOD_l: expected_type = type_wchar_t_ptr; break;
431 case FMT_MOD_w: expected_type = type_wchar_t_ptr; break;
434 warn_invalid_length_modifier(pos, fmt_mod, fmt);
437 expected_qual = TYPE_QUALIFIER_CONST;
438 allowed_flags = FMT_FLAG_MINUS;
442 if (fmt_mod != FMT_MOD_NONE) {
443 warn_invalid_length_modifier(pos, fmt_mod, fmt);
446 expected_type = type_void_ptr;
447 allowed_flags = FMT_FLAG_NONE;
452 case FMT_MOD_NONE: expected_type = type_int_ptr; break;
453 case FMT_MOD_hh: expected_type = type_signed_char_ptr; break;
454 case FMT_MOD_h: expected_type = type_short_ptr; break;
455 case FMT_MOD_l: expected_type = type_long_ptr; break;
456 case FMT_MOD_ll: expected_type = type_long_long_ptr; break;
457 case FMT_MOD_j: expected_type = type_intmax_t_ptr; break;
458 case FMT_MOD_z: expected_type = type_ssize_t_ptr; break;
459 case FMT_MOD_t: expected_type = type_ptrdiff_t_ptr; break;
462 warn_invalid_length_modifier(pos, fmt_mod, fmt);
465 allowed_flags = FMT_FLAG_NONE;
469 warningf(WARN_FORMAT, pos, "encountered unknown conversion specifier '%%%c' at position %u", fmt, num_fmt);
471 warningf(WARN_FORMAT, pos, "too few arguments for format string");
477 format_flags_t wrong_flags = fmt_flags & ~allowed_flags;
478 if (wrong_flags != 0) {
481 if (wrong_flags & FMT_FLAG_HASH) *p++ = '#';
482 if (wrong_flags & FMT_FLAG_ZERO) *p++ = '0';
483 if (wrong_flags & FMT_FLAG_MINUS) *p++ = '-';
484 if (wrong_flags & FMT_FLAG_SPACE) *p++ = ' ';
485 if (wrong_flags & FMT_FLAG_PLUS) *p++ = '+';
486 if (wrong_flags & FMT_FLAG_TICK) *p++ = '\'';
489 warningf(WARN_FORMAT, pos, "invalid format flags \"%s\" in conversion specification %%%c at position %u", wrong, fmt, num_fmt);
493 warningf(WARN_FORMAT, pos, "too few arguments for format string");
497 { /* create a scope here to prevent warning about the jump to next_arg */
498 type_t *const arg_type = arg->expression->base.type;
499 type_t *const arg_skip = skip_typeref(arg_type);
500 type_t *const expected_type_skip = skip_typeref(expected_type);
503 /* allow any pointer type for %p, not just void */
504 if (is_type_pointer(arg_skip))
508 if (is_type_pointer(expected_type_skip)) {
509 if (is_type_pointer(arg_skip)) {
510 type_t *const exp_to = skip_typeref(expected_type_skip->pointer.points_to);
511 type_t *const arg_to = skip_typeref(arg_skip->pointer.points_to);
512 if ((arg_to->base.qualifiers & ~expected_qual) == 0 &&
513 get_unqualified_type(arg_to) == exp_to) {
517 } else if (get_unqualified_type(arg_skip) == expected_type_skip) {
520 if (is_type_valid(arg_skip)) {
521 source_position_t const *const apos = &arg->expression->base.source_position;
522 char const *const mod = get_length_modifier_name(fmt_mod);
523 warningf(WARN_FORMAT, apos, "argument type '%T' does not match conversion specifier '%%%s%c' at position %u", arg_type, mod, (char)fmt, num_fmt);
530 if (c+1 < string + size) {
531 warningf(WARN_FORMAT, pos, "format string contains '\\0'");
537 * Check printf-style format.
539 static void check_printf_format(call_argument_t const *arg,
540 format_spec_t const *const spec)
542 /* find format arg */
544 for (; idx < spec->fmt_idx; ++idx) {
550 expression_t const *const fmt_expr = arg->expression;
552 /* find the real args */
553 for (; idx < spec->arg_idx && arg != NULL; ++idx)
556 int const num_fmt = internal_check_printf_format(fmt_expr, arg, spec);
561 for (; arg != NULL; arg = arg->next)
563 if (num_args > (size_t)num_fmt) {
564 source_position_t const *const pos = &fmt_expr->base.source_position;
565 warningf(WARN_FORMAT, pos, "%u argument%s but only %u format specifier%s", num_args, num_args != 1 ? "s" : "", num_fmt, num_fmt != 1 ? "s" : "");
570 * Check scanf-style format.
572 static void check_scanf_format(const call_argument_t *arg,
573 const format_spec_t *spec)
575 /* find format arg */
577 for (; idx < spec->fmt_idx; ++idx) {
583 const expression_t *fmt_expr = arg->expression;
584 if (fmt_expr->kind == EXPR_UNARY_CAST_IMPLICIT) {
585 fmt_expr = fmt_expr->unary.value;
588 if (fmt_expr->kind != EXPR_STRING_LITERAL
589 && fmt_expr->kind != EXPR_WIDE_STRING_LITERAL)
592 const char *string = fmt_expr->literal.value.begin;
593 size_t size = fmt_expr->literal.value.size;
594 const char *c = string;
596 /* find the real args */
597 for (; idx < spec->arg_idx && arg != NULL; ++idx)
600 const source_position_t *pos = &fmt_expr->base.source_position;
601 unsigned num_fmt = 0;
603 for (fmt = *c; fmt != '\0'; fmt = *(++c)) {
608 warningf(WARN_FORMAT, pos, "dangling '%%' in format string");
616 /* look for length modifiers */
617 format_length_modifier_t fmt_mod = FMT_MOD_NONE;
623 fmt_mod = FMT_MOD_hh;
633 fmt_mod = FMT_MOD_ll;
639 case 'L': fmt = *(++c); fmt_mod = FMT_MOD_L; break;
640 case 'j': fmt = *(++c); fmt_mod = FMT_MOD_j; break;
641 case 't': fmt = *(++c); fmt_mod = FMT_MOD_t; break;
642 case 'z': fmt = *(++c); fmt_mod = FMT_MOD_z; break;
658 fmt_mod = FMT_MOD_I32;
663 } else if (fmt == '6') {
667 fmt_mod = FMT_MOD_I64;
678 warningf(WARN_FORMAT, pos, "dangling %% with conversion specififer in format string");
682 type_t *expected_type;
687 case FMT_MOD_NONE: expected_type = type_int; break;
688 case FMT_MOD_hh: expected_type = type_signed_char; break;
689 case FMT_MOD_h: expected_type = type_short; break;
690 case FMT_MOD_l: expected_type = type_long; break;
691 case FMT_MOD_ll: expected_type = type_long_long; break;
692 case FMT_MOD_j: expected_type = type_intmax_t; break;
693 case FMT_MOD_z: expected_type = type_ssize_t; break;
694 case FMT_MOD_t: expected_type = type_ptrdiff_t; break;
695 case FMT_MOD_I: expected_type = type_ptrdiff_t; break;
696 case FMT_MOD_I32: expected_type = type_int32; break;
697 case FMT_MOD_I64: expected_type = type_int64; break;
700 warn_invalid_length_modifier(pos, fmt_mod, fmt);
710 case FMT_MOD_NONE: expected_type = type_unsigned_int; break;
711 case FMT_MOD_hh: expected_type = type_unsigned_char; break;
712 case FMT_MOD_h: expected_type = type_unsigned_short; break;
713 case FMT_MOD_l: expected_type = type_unsigned_long; break;
714 case FMT_MOD_ll: expected_type = type_unsigned_long_long; break;
715 case FMT_MOD_j: expected_type = type_uintmax_t; break;
716 case FMT_MOD_z: expected_type = type_size_t; break;
717 case FMT_MOD_t: expected_type = type_uptrdiff_t; break;
718 case FMT_MOD_I: expected_type = type_size_t; break;
719 case FMT_MOD_I32: expected_type = type_unsigned_int32; break;
720 case FMT_MOD_I64: expected_type = type_unsigned_int64; break;
723 warn_invalid_length_modifier(pos, fmt_mod, fmt);
737 case FMT_MOD_l: expected_type = type_double; break;
738 case FMT_MOD_NONE: expected_type = type_float; break;
739 case FMT_MOD_L: expected_type = type_long_double; break;
742 warn_invalid_length_modifier(pos, fmt_mod, fmt);
748 if (fmt_mod != FMT_MOD_NONE) {
749 warn_invalid_length_modifier(pos, fmt_mod, fmt);
752 expected_type = type_wchar_t;
756 expected_type = type_int;
758 case FMT_MOD_NONE: expected_type = type_int; break; /* TODO promoted char */
759 case FMT_MOD_l: expected_type = type_wint_t; break;
760 case FMT_MOD_w: expected_type = type_wchar_t; break;
763 warn_invalid_length_modifier(pos, fmt_mod, fmt);
769 if (fmt_mod != FMT_MOD_NONE) {
770 warn_invalid_length_modifier(pos, fmt_mod, fmt);
773 expected_type = type_wchar_t;
779 case FMT_MOD_NONE: expected_type = type_char; break;
780 case FMT_MOD_l: expected_type = type_wchar_t; break;
781 case FMT_MOD_w: expected_type = type_wchar_t; break;
784 warn_invalid_length_modifier(pos, fmt_mod, fmt);
790 if (fmt_mod != FMT_MOD_NONE) {
791 warn_invalid_length_modifier(pos, fmt_mod, fmt);
794 expected_type = type_void_ptr;
799 case FMT_MOD_NONE: expected_type = type_int; break;
800 case FMT_MOD_hh: expected_type = type_signed_char; break;
801 case FMT_MOD_h: expected_type = type_short; break;
802 case FMT_MOD_l: expected_type = type_long; break;
803 case FMT_MOD_ll: expected_type = type_long_long; break;
804 case FMT_MOD_j: expected_type = type_intmax_t; break;
805 case FMT_MOD_z: expected_type = type_ssize_t; break;
806 case FMT_MOD_t: expected_type = type_ptrdiff_t; break;
809 warn_invalid_length_modifier(pos, fmt_mod, fmt);
815 warningf(WARN_FORMAT, pos, "encountered unknown conversion specifier '%%%c' at format %u", fmt, num_fmt);
817 warningf(WARN_FORMAT, pos, "too few arguments for format string");
824 warningf(WARN_FORMAT, pos, "too few arguments for format string");
828 { /* create a scope here to prevent warning about the jump to next_arg */
829 type_t *const arg_type = arg->expression->base.type;
830 type_t *const arg_skip = skip_typeref(arg_type);
831 type_t *const expected_type_skip = skip_typeref(expected_type);
833 if (! is_type_pointer(arg_skip))
835 type_t *const ptr_skip = skip_typeref(arg_skip->pointer.points_to);
838 /* allow any pointer type for %p, not just void */
839 if (is_type_pointer(ptr_skip))
843 /* do NOT allow const or restrict, all other should be ok */
844 if (ptr_skip->base.qualifiers & (TYPE_QUALIFIER_CONST | TYPE_QUALIFIER_VOLATILE))
846 type_t *const unqual_ptr = get_unqualified_type(ptr_skip);
847 if (unqual_ptr == expected_type_skip) {
849 } else if (expected_type_skip == type_char) {
850 /* char matches with unsigned char AND signed char */
851 if (unqual_ptr == type_signed_char || unqual_ptr == type_unsigned_char)
855 if (is_type_valid(arg_skip)) {
856 source_position_t const *const apos = &arg->expression->base.source_position;
857 char const *const mod = get_length_modifier_name(fmt_mod);
858 warningf(WARN_FORMAT, apos, "argument type '%T' does not match conversion specifier '%%%s%c' at position %u", arg_type, mod, (char)fmt, num_fmt);
865 if (c+1 < string + size) {
866 warningf(WARN_FORMAT, pos, "format string contains '\\0'");
869 unsigned num_args = num_fmt;
870 while (arg != NULL) {
874 warningf(WARN_FORMAT, pos, "%u argument%s but only %u format specifier%s", num_args, num_args != 1 ? "s" : "", num_fmt, num_fmt != 1 ? "s" : "");
878 static const format_spec_t builtin_table[] = {
879 { "printf", FORMAT_PRINTF, 0, 1 },
880 { "wprintf", FORMAT_PRINTF, 0, 1 },
881 { "sprintf", FORMAT_PRINTF, 1, 2 },
882 { "swprintf", FORMAT_PRINTF, 1, 2 },
883 { "snprintf", FORMAT_PRINTF, 2, 3 },
884 { "snwprintf", FORMAT_PRINTF, 2, 3 },
885 { "fprintf", FORMAT_PRINTF, 1, 2 },
886 { "fwprintf", FORMAT_PRINTF, 1, 2 },
887 { "snwprintf", FORMAT_PRINTF, 2, 3 },
888 { "snwprintf", FORMAT_PRINTF, 2, 3 },
890 { "scanf", FORMAT_SCANF, 0, 1 },
891 { "wscanf", FORMAT_SCANF, 0, 1 },
892 { "sscanf", FORMAT_SCANF, 1, 2 },
893 { "swscanf", FORMAT_SCANF, 1, 2 },
894 { "fscanf", FORMAT_SCANF, 1, 2 },
895 { "fwscanf", FORMAT_SCANF, 1, 2 },
897 { "strftime", FORMAT_STRFTIME, 3, 4 },
898 { "wcstrftime", FORMAT_STRFTIME, 3, 4 },
900 { "strfmon", FORMAT_STRFMON, 3, 4 },
903 { "_snprintf", FORMAT_PRINTF, 2, 3 },
904 { "_snwprintf", FORMAT_PRINTF, 2, 3 },
905 { "_scrintf", FORMAT_PRINTF, 0, 1 },
906 { "_scwprintf", FORMAT_PRINTF, 0, 1 },
907 { "printf_s", FORMAT_PRINTF, 0, 1 },
908 { "wprintf_s", FORMAT_PRINTF, 0, 1 },
909 { "sprintf_s", FORMAT_PRINTF, 3, 4 },
910 { "swprintf_s", FORMAT_PRINTF, 3, 4 },
911 { "fprintf_s", FORMAT_PRINTF, 1, 2 },
912 { "fwprintf_s", FORMAT_PRINTF, 1, 2 },
913 { "_sprintf_l", FORMAT_PRINTF, 1, 3 },
914 { "_swprintf_l", FORMAT_PRINTF, 1, 3 },
915 { "_printf_l", FORMAT_PRINTF, 0, 2 },
916 { "_wprintf_l", FORMAT_PRINTF, 0, 2 },
917 { "_fprintf_l", FORMAT_PRINTF, 1, 3 },
918 { "_fwprintf_l", FORMAT_PRINTF, 1, 3 },
919 { "_printf_s_l", FORMAT_PRINTF, 0, 2 },
920 { "_wprintf_s_l", FORMAT_PRINTF, 0, 2 },
921 { "_sprintf_s_l", FORMAT_PRINTF, 3, 5 },
922 { "_swprintf_s_l", FORMAT_PRINTF, 3, 5 },
923 { "_fprintf_s_l", FORMAT_PRINTF, 1, 3 },
924 { "_fwprintf_s_l", FORMAT_PRINTF, 1, 3 },
927 void check_format(const call_expression_t *const call)
929 if (!is_warn_on(WARN_FORMAT))
932 const expression_t *const func_expr = call->function;
933 if (func_expr->kind != EXPR_REFERENCE)
936 const entity_t *const entity = func_expr->reference.entity;
937 const call_argument_t * arg = call->arguments;
940 * For some functions we always check the format, even if it was not
941 * specified. This allows to check format even in MS mode or without
944 const char *const name = entity->base.symbol->string;
945 for (size_t i = 0; i < lengthof(builtin_table); ++i) {
946 if (strcmp(name, builtin_table[i].name) == 0) {
947 switch (builtin_table[i].fmt_kind) {
949 check_printf_format(arg, &builtin_table[i]);
952 check_scanf_format(arg, &builtin_table[i]);
954 case FORMAT_STRFTIME:
956 /* TODO: implement other cases */