354 #define strcat(a,b) __strcat_chk(a,b,(size_t)-1)  macro
358 #define strcat BUILTIN(strcat)  macro
359 char *strcat(char *restrict s1, const char *restrict s2);
365   strcat(NULL, x); // expected-warning{{Null pointer argument in call to string copy function}}  in strcat_null_dst()
369   strcat(x, NULL); // expected-warning{{Null pointer argument in call to string copy function}}  in strcat_null_src()
373 …strcat(x, (char*)&strcat_fn); // expected-warning{{Argument to string copy function is the address…  in strcat_fn()
384   clang_analyzer_eval(strcat(x, y) == x); // expected-warning{{TRUE}}  in strcat_effects()
391     strcat(x, y); // expected-warning{{String copy function overflows destination buffer}}  in strcat_overflow_0()
397     strcat(x, y); // expected-warning{{String copy function overflows destination buffer}}  in strcat_overflow_1()
403     strcat(x, y); // expected-warning{{String copy function overflows destination buffer}}  in strcat_overflow_2()
409     strcat(x, y); // no-warning  in strcat_no_overflow()
413 	strcat(dst, "1234");  in strcat_symbolic_dst_length()
419   strcat(dst, "1234");  in strcat_symbolic_dst_length_taint()
425 	strcat(dst, &src[offset]);  in strcat_unknown_src_length()
438 	strcat(dst, src);  in strcat_too_big()
1155 	strcat(dst, src);  in strcat_symbolic_src_length()