<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>171494</bug_id>
          
          <creation_ts>2017-05-01 06:47:38 -0700</creation_ts>
          <short_desc>check-webkit-style: Enable sprintf(), strcat(), strcpy() and printf() format checks</short_desc>
          <delta_ts>2017-05-01 15:49:24 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Tools / Tests</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=170994</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>171512</blocked>
    
    <blocked>171517</blocked>
    
    <blocked>171520</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="David Kilzer (:ddkilzer)">ddkilzer</reporter>
          <assigned_to name="David Kilzer (:ddkilzer)">ddkilzer</assigned_to>
          <cc>beidson</cc>
    
    <cc>bfulgham</cc>
    
    <cc>buildbot</cc>
    
    <cc>commit-queue</cc>
    
    <cc>dbates</cc>
    
    <cc>ddkilzer</cc>
    
    <cc>glenn</cc>
    
    <cc>joepeck</cc>
    
    <cc>mitz</cc>
    
    <cc>sam</cc>
    
    <cc>wilander</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1303223</commentid>
    <comment_count>0</comment_count>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2017-05-01 06:47:38 -0700</bug_when>
    <thetext>I&apos;m guessing these checks were disabled because all of the &quot;runtime/printf&quot; checks together were too verbose when the original check-webkit-style was committed in 2009 in r45857.

However, this meant that functions like strcat() and strcpy() were allowed to be committed into the WebKit tree at various times (see Bug 170994).

We should turn these checks back on under a new category.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1303227</commentid>
    <comment_count>1</comment_count>
      <attachid>308719</attachid>
    <who name="David Kilzer (:ddkilzer)">ddkilzer</who>
    <bug_when>2017-05-01 06:54:43 -0700</bug_when>
    <thetext>Created attachment 308719
Patch v1</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1303250</commentid>
    <comment_count>2</comment_count>
      <attachid>308719</attachid>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2017-05-01 09:36:29 -0700</bug_when>
    <thetext>Comment on attachment 308719
Patch v1

r=me.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1303273</commentid>
    <comment_count>3</comment_count>
      <attachid>308719</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2017-05-01 10:06:43 -0700</bug_when>
    <thetext>Comment on attachment 308719
Patch v1

Clearing flags on attachment: 308719

Committed r216017: &lt;http://trac.webkit.org/changeset/216017&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1303274</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2017-05-01 10:06:45 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>308719</attachid>
            <date>2017-05-01 06:54:43 -0700</date>
            <delta_ts>2017-05-01 10:06:43 -0700</delta_ts>
            <desc>Patch v1</desc>
            <filename>bug-171494-20170501065458.patch</filename>
            <type>text/plain</type>
            <size>5498</size>
            <attacher name="David Kilzer (:ddkilzer)">ddkilzer</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjE2MDEzCmRpZmYgLS1naXQgYS9Ub29scy9DaGFuZ2VMb2cg
Yi9Ub29scy9DaGFuZ2VMb2cKaW5kZXggMDQ1NWE1NTYwMDhlOGU2ZmEzNjQxNTQxMGY2MzNhN2M0
NGFkNTkxMi4uODBkZjZhMTUyOWJjOTNlZTM2OGVmMjRlZGE2MDRlNWUzNGJkNmMzOSAxMDA2NDQK
LS0tIGEvVG9vbHMvQ2hhbmdlTG9nCisrKyBiL1Rvb2xzL0NoYW5nZUxvZwpAQCAtMSw1ICsxLDIz
IEBACiAyMDE3LTA1LTAxICBEYXZpZCBLaWx6ZXIgIDxkZGtpbHplckBhcHBsZS5jb20+CiAKKyAg
ICAgICAgY2hlY2std2Via2l0LXN0eWxlOiBFbmFibGUgc3ByaW50ZigpLCBzdHJjYXQoKSwgc3Ry
Y3B5KCkgYW5kIHByaW50ZigpIGZvcm1hdCBjaGVja3MKKyAgICAgICAgPGh0dHBzOi8vd2Via2l0
Lm9yZy9iLzE3MTQ5ND4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKwor
ICAgICAgICAqIFNjcmlwdHMvd2Via2l0cHkvc3R5bGUvY2hlY2tlcnMvY3BwLnB5OgorICAgICAg
ICAoY2hlY2tfbGFuZ3VhZ2UpOiBDaGFuZ2UgY2F0ZWdvcmllcyBmb3IgY2VydGFpbiBjaGVja2Vy
cyBmcm9tCisgICAgICAgICdydW50aW1lL3ByaW50ZicgdG8gJ3NlY3VyaXR5L3ByaW50Zicgc28g
dGhleSBhcmUgbm8gbG9uZ2VyCisgICAgICAgIGZpbHRlcmVkLgorICAgICAgICAoQ3BwQ2hlY2tl
ci5jYXRlZ29yaWVzKTogQWRkICdzZWN1cml0eS9wcmludGYnLgorICAgICAgICAqIFNjcmlwdHMv
d2Via2l0cHkvc3R5bGUvY2hlY2tlcnMvY3BwX3VuaXR0ZXN0LnB5OgorICAgICAgICAoQ3BwU3R5
bGVUZXN0LnRlc3RfaW5zZWN1cmVfc3RyaW5nX29wZXJhdGlvbnMpOiBBZGQgbmV3IHRlc3QgZm9y
CisgICAgICAgIHNwcmludGYoKSwgc3RyY2F0KCkgYW5kIHN0cmNweSgpLgorICAgICAgICAoQ3Bw
U3R5bGVUZXN0LnRlc3RfZm9ybWF0X3N0cmluZ3MpOiBVcGRhdGUgdGVzdCByZXN1bHRzIGZvciBu
ZXcKKyAgICAgICAgJ3NlY3VyaXR5L3ByaW50ZicgY2F0ZWdvcnkgdXNlLgorCisyMDE3LTA1LTAx
ICBEYXZpZCBLaWx6ZXIgIDxkZGtpbHplckBhcHBsZS5jb20+CisKICAgICAgICAgW0NvY29hXSBS
ZXBsYWNlIHVzZXMgb2YgW2dldOKApkNsYXNzKCkgYWxsb2NdIHdpdGggYWxsb2PigKZJbnN0YW5j
ZSgpIGluIFRlc3RXZWJLaXRBUEkKICAgICAgICAgPGh0dHBzOi8vd2Via2l0Lm9yZy9iLzE3MTQ5
Mz4KIApkaWZmIC0tZ2l0IGEvVG9vbHMvU2NyaXB0cy93ZWJraXRweS9zdHlsZS9jaGVja2Vycy9j
cHAucHkgYi9Ub29scy9TY3JpcHRzL3dlYmtpdHB5L3N0eWxlL2NoZWNrZXJzL2NwcC5weQppbmRl
eCA1MzRiMTkzN2M4Y2QwOTdmNGUzZTdlM2Q0ZmFkNGIwZDkzNTdmYWYzLi5hNjI5NGI0YTBjNWIy
NTY3NzQ3Mjk5MTA3NWY0NjY5NmE2ZThkYjhiIDEwMDY0NAotLS0gYS9Ub29scy9TY3JpcHRzL3dl
YmtpdHB5L3N0eWxlL2NoZWNrZXJzL2NwcC5weQorKysgYi9Ub29scy9TY3JpcHRzL3dlYmtpdHB5
L3N0eWxlL2NoZWNrZXJzL2NwcC5weQpAQCAtMzE4MCwxMiArMzE4MCwxMiBAQCBkZWYgY2hlY2tf
bGFuZ3VhZ2UoZmlsZW5hbWUsIGNsZWFuX2xpbmVzLCBsaW5lX251bWJlciwgZmlsZV9leHRlbnNp
b24sIGluY2x1ZGVfcwogCiAgICAgIyBDaGVjayBpZiBzb21lIHZlcmJvdGVuIEMgZnVuY3Rpb25z
IGFyZSBiZWluZyB1c2VkLgogICAgIGlmIHNlYXJjaChyJ1xic3ByaW50ZlxiJywgbGluZSk6Ci0g
ICAgICAgIGVycm9yKGxpbmVfbnVtYmVyLCAncnVudGltZS9wcmludGYnLCA1LAorICAgICAgICBl
cnJvcihsaW5lX251bWJlciwgJ3NlY3VyaXR5L3ByaW50ZicsIDUsCiAgICAgICAgICAgICAgICdO
ZXZlciB1c2Ugc3ByaW50Zi4gIFVzZSBzbnByaW50ZiBpbnN0ZWFkLicpCiAgICAgbWF0Y2hlZCA9
IHNlYXJjaChyJ1xiKHN0cmNweXxzdHJjYXQpXGInLCBsaW5lKQogICAgIGlmIG1hdGNoZWQ6Ci0g
ICAgICAgIGVycm9yKGxpbmVfbnVtYmVyLCAncnVudGltZS9wcmludGYnLCA0LAotICAgICAgICAg
ICAgICAnQWxtb3N0IGFsd2F5cywgc25wcmludGYgaXMgYmV0dGVyIHRoYW4gJXMnICUgbWF0Y2hl
ZC5ncm91cCgxKSkKKyAgICAgICAgZXJyb3IobGluZV9udW1iZXIsICdzZWN1cml0eS9wcmludGYn
LCA0LAorICAgICAgICAgICAgICAnQWxtb3N0IGFsd2F5cywgc25wcmludGYgaXMgYmV0dGVyIHRo
YW4gJXMuJyAlIG1hdGNoZWQuZ3JvdXAoMSkpCiAKICAgICBpZiBzZWFyY2gocidcYnNzY2FuZlxi
JywgbGluZSk6CiAgICAgICAgIGVycm9yKGxpbmVfbnVtYmVyLCAncnVudGltZS9wcmludGYnLCAx
LApAQCAtMzIwMiw3ICszMjAyLDcgQEAgZGVmIGNoZWNrX2xhbmd1YWdlKGZpbGVuYW1lLCBjbGVh
bl9saW5lcywgbGluZV9udW1iZXIsIGZpbGVfZXh0ZW5zaW9uLCBpbmNsdWRlX3MKICAgICAjIE5v
dCBwZXJmZWN0IGJ1dCBpdCBjYW4gY2F0Y2ggcHJpbnRmKGZvby5jX3N0cigpKSBhbmQgcHJpbnRm
KGZvby0+Y19zdHIoKSkKICAgICBtYXRjaGVkID0gcmUuc2VhcmNoKHInXGIoKD86c3RyaW5nKT9w
cmludGYpXHMqXCgoW1x3LlwtPigpXSspXCknLCBsaW5lLCByZS5JKQogICAgIGlmIG1hdGNoZWQ6
Ci0gICAgICAgIGVycm9yKGxpbmVfbnVtYmVyLCAncnVudGltZS9wcmludGYnLCA0LAorICAgICAg
ICBlcnJvcihsaW5lX251bWJlciwgJ3NlY3VyaXR5L3ByaW50ZicsIDQsCiAgICAgICAgICAgICAg
ICdQb3RlbnRpYWwgZm9ybWF0IHN0cmluZyBidWcuIERvICVzKCIlJXMiLCAlcykgaW5zdGVhZC4n
CiAgICAgICAgICAgICAgICUgKG1hdGNoZWQuZ3JvdXAoMSksIG1hdGNoZWQuZ3JvdXAoMikpKQog
CkBAIC0zOTI2LDYgKzM5MjYsNyBAQCBjbGFzcyBDcHBDaGVja2VyKG9iamVjdCk6CiAgICAgICAg
ICdydW50aW1lL3Vuc2lnbmVkJywKICAgICAgICAgJ3J1bnRpbWUvdmlydHVhbCcsCiAgICAgICAg
ICdydW50aW1lL3d0Zl9tb3ZlJywKKyAgICAgICAgJ3NlY3VyaXR5L3ByaW50ZicsCiAgICAgICAg
ICd3aGl0ZXNwYWNlL2JsYW5rX2xpbmUnLAogICAgICAgICAnd2hpdGVzcGFjZS9icmFjZXMnLAog
ICAgICAgICAnd2hpdGVzcGFjZS9icmFja2V0cycsCmRpZmYgLS1naXQgYS9Ub29scy9TY3JpcHRz
L3dlYmtpdHB5L3N0eWxlL2NoZWNrZXJzL2NwcF91bml0dGVzdC5weSBiL1Rvb2xzL1NjcmlwdHMv
d2Via2l0cHkvc3R5bGUvY2hlY2tlcnMvY3BwX3VuaXR0ZXN0LnB5CmluZGV4IDhjM2EwMzc5YjUx
ZWU5OTAxMTJlYTc5N2NkZGU5N2NmOWJhNWM4MWYuLjk0NDk4MGRjYjk4Mjg4NTNkNzBmNDk0YWE3
ODBiYTQyYThiNDMzMjMgMTAwNjQ0Ci0tLSBhL1Rvb2xzL1NjcmlwdHMvd2Via2l0cHkvc3R5bGUv
Y2hlY2tlcnMvY3BwX3VuaXR0ZXN0LnB5CisrKyBiL1Rvb2xzL1NjcmlwdHMvd2Via2l0cHkvc3R5
bGUvY2hlY2tlcnMvY3BwX3VuaXR0ZXN0LnB5CkBAIC0xNTI4LDYgKzE1MjgsMjIgQEAgY2xhc3Mg
Q3BwU3R5bGVUZXN0KENwcFN0eWxlVGVzdEJhc2UpOgogICAgICAgICAgICAgICAgICAgICAgICAg
ICcgZm9yIGltcHJvdmVkIHRocmVhZCBzYWZldHkuJwogICAgICAgICAgICAgICAgICAgICAgICAg
ICcgIFtydW50aW1lL3RocmVhZHNhZmVfZm5dIFsyXScpCiAKKyAgICAjIFRlc3QgZm9yIGluc2Vj
dXJlIHN0cmluZyBmdW5jdGlvbnMgbGlrZSBzdHJjcHkoKS9zdHJjYXQoKS4KKyAgICBkZWYgdGVz
dF9pbnNlY3VyZV9zdHJpbmdfb3BlcmF0aW9ucyhzZWxmKToKKyAgICAgICAgc2VsZi5hc3NlcnRf
bGludCgKKyAgICAgICAgICAgICdzcHJpbnRmKGRlc3RpbmF0aW9uLCAiJXMiLCBhcmcpJywKKyAg
ICAgICAgICAgICdOZXZlciB1c2Ugc3ByaW50Zi4gIFVzZSBzbnByaW50ZiBpbnN0ZWFkLicKKyAg
ICAgICAgICAgICcgIFtzZWN1cml0eS9wcmludGZdIFs1XScpCisgICAgICAgIHNlbGYuYXNzZXJ0
X2xpbnQoCisgICAgICAgICAgICAnc3RyY2F0KGRlc3RpbmF0aW9uLCBhcHBlbmQpJywKKyAgICAg
ICAgICAgICdBbG1vc3QgYWx3YXlzLCBzbnByaW50ZiBpcyBiZXR0ZXIgdGhhbiBzdHJjYXQuJwor
ICAgICAgICAgICAgJyAgW3NlY3VyaXR5L3ByaW50Zl0gWzRdJykKKyAgICAgICAgc2VsZi5hc3Nl
cnRfbGludCgKKyAgICAgICAgICAgICdzdHJjcHkoZGVzdGluYXRpb24sIHNvdXJjZSknLAorICAg
ICAgICAgICAgJ0FsbW9zdCBhbHdheXMsIHNucHJpbnRmIGlzIGJldHRlciB0aGFuIHN0cmNweS4n
CisgICAgICAgICAgICAnICBbc2VjdXJpdHkvcHJpbnRmXSBbNF0nKQorICAgICAgICBzZWxmLmFz
c2VydF9saW50KCdzdHJzdHIoaGF5c3RhY2ssICJuZWVkbGUiKScsICcnKQorCiAgICAgIyBUZXN0
IHBvdGVudGlhbCBmb3JtYXQgc3RyaW5nIGJ1Z3MgbGlrZSBwcmludGYoZm9vKS4KICAgICBkZWYg
dGVzdF9mb3JtYXRfc3RyaW5ncyhzZWxmKToKICAgICAgICAgc2VsZi5hc3NlcnRfbGludCgncHJp
bnRmKCJmb28iKScsICcnKQpAQCAtMTUzNiwyMiArMTU1MiwyMiBAQCBjbGFzcyBDcHBTdHlsZVRl
c3QoQ3BwU3R5bGVUZXN0QmFzZSk6CiAgICAgICAgIHNlbGYuYXNzZXJ0X2xpbnQoCiAgICAgICAg
ICAgICAncHJpbnRmKGZvbyknLAogICAgICAgICAgICAgJ1BvdGVudGlhbCBmb3JtYXQgc3RyaW5n
IGJ1Zy4gRG8gcHJpbnRmKCIlcyIsIGZvbykgaW5zdGVhZC4nCi0gICAgICAgICAgICAnICBbcnVu
dGltZS9wcmludGZdIFs0XScpCisgICAgICAgICAgICAnICBbc2VjdXJpdHkvcHJpbnRmXSBbNF0n
KQogICAgICAgICBzZWxmLmFzc2VydF9saW50KAogICAgICAgICAgICAgJ3ByaW50Zihmb28uY19z
dHIoKSknLAogICAgICAgICAgICAgJ1BvdGVudGlhbCBmb3JtYXQgc3RyaW5nIGJ1Zy4gJwogICAg
ICAgICAgICAgJ0RvIHByaW50ZigiJXMiLCBmb28uY19zdHIoKSkgaW5zdGVhZC4nCi0gICAgICAg
ICAgICAnICBbcnVudGltZS9wcmludGZdIFs0XScpCisgICAgICAgICAgICAnICBbc2VjdXJpdHkv
cHJpbnRmXSBbNF0nKQogICAgICAgICBzZWxmLmFzc2VydF9saW50KAogICAgICAgICAgICAgJ3By
aW50Zihmb28tPmNfc3RyKCkpJywKICAgICAgICAgICAgICdQb3RlbnRpYWwgZm9ybWF0IHN0cmlu
ZyBidWcuICcKICAgICAgICAgICAgICdEbyBwcmludGYoIiVzIiwgZm9vLT5jX3N0cigpKSBpbnN0
ZWFkLicKLSAgICAgICAgICAgICcgIFtydW50aW1lL3ByaW50Zl0gWzRdJykKKyAgICAgICAgICAg
ICcgIFtzZWN1cml0eS9wcmludGZdIFs0XScpCiAgICAgICAgIHNlbGYuYXNzZXJ0X2xpbnQoCiAg
ICAgICAgICAgICAnU3RyaW5nUHJpbnRmKGZvbyknLAogICAgICAgICAgICAgJ1BvdGVudGlhbCBm
b3JtYXQgc3RyaW5nIGJ1Zy4gRG8gU3RyaW5nUHJpbnRmKCIlcyIsIGZvbykgaW5zdGVhZC4nCiAg
ICAgICAgICAgICAnJwotICAgICAgICAgICAgJyAgW3J1bnRpbWUvcHJpbnRmXSBbNF0nKQorICAg
ICAgICAgICAgJyAgW3NlY3VyaXR5L3ByaW50Zl0gWzRdJykKIAogICAgICMgVmFyaWFibGUtbGVu
Z3RoIGFycmF5cyBhcmUgbm90IHBlcm1pdHRlZC4KICAgICBkZWYgdGVzdF92YXJpYWJsZV9sZW5n
dGhfYXJyYXlfZGV0ZWN0aW9uKHNlbGYpOgo=
</data>

          </attachment>
      

    </bug>

</bugzilla>