SV.FMT_STR.PRINT_PARAMS_WRONGNUM.MANY

Too many arguments in print function call

In a format string in a print function call, there should be the same number of parameters as there are format specifications. The SV.FMT_STR.PRINT_PARAMS_WRONGNUM.MANY checker flags the code if there are more parameters provided to the print function than specified in the format string.

Vulnerability and risk

When the syntax of the conversion specification is incorrect, the resulting behavior is undefined, and it may cause unexpected output.

Vulnerable code example

Copy 
  void foo(FILE* f, char* pc, int i, char c) {
      fprintf(f, "%o", i, pc);    
      fprintf(f, "%p", pc);
  }

Klocwork reports an error for line 2. Since there should be the same number of specifications and corresponding parameters in the format string, the function is expecting only one parameter for the %o specification, and receives two. Line 3 isn't flagged, since the format string has one specification and one corresponding parameter.

Fixed code example

Copy 
  void foo(FILE* f, char* pc, int i, char c) {
      fprintf(f, "%o", i);    
      fprintf(f, "%p", pc);
  }

In the fixed example, line 2 has one specifications and one corresponding parameter.

Related checkers

External guidance