False Positive on C language

SonarQube for IDE Eclipse
1

I’m using sonarlint for clipse in connected mode with sonarqube 10.04
Whit the following C code sonarlint give the following finding: s:C3457

#define STR_HELPER(x) #x
#define STR(x) STR_HELPER(x)

#define IP_LEN 16

sscanf(p_cfgCmd, "ip=" STR(IP_LEN - 1) "s", ipAddr);

image
image1910×988 212 KB

4

Hi @alef75 ,
From what you are sharing, the error seems to be correct. You pass the argument ipAddr, but your pattern contains no conversion specification that would write in it. If I had to guess, I would say that you forgot a % before the call to STR.

5

Thank you Fred

you are perfectly right, I missed the “%” before the Macro
sorry