> Maybe this will help you:
>
> @r@
> format list d;
> @@
>
> "%@d@"
>
> @script:ocaml s@
> d << r.d;
> res;
> @@
> res := make_expr ("\""^(String.concat "%s" (Str.split_delim
> (Str.regexp_string "%d") d))^"\"")

Such a replacement approach might look promising.
But I got the impression that another aspect can be more important
for the safe data processing of format strings.
The passed function parameters should fit to the specified
data conversions in the string.

Can the Coccinelle software help any more to group or mark
update candidates from the expression list in appropriate ways?

Regards,
Markus
_______________________________________________
Cocci mailing list
Cocci@systeme.lip6.fr
https://systeme.lip6.fr/mailman/listinfo/cocci

Reply via email to