543 #define strncat(a,b,c) __strncat_chk(a,b,c, (size_t)-1)  macro
547 #define strncat BUILTIN(strncat)  macro
548 char *strncat(char *restrict s1, const char *restrict s2, size_t n);
554   strncat(NULL, x, 4); // expected-warning{{Null pointer argument in call to string copy function}}  in strncat_null_dst()
558   strncat(x, NULL, 4); // expected-warning{{Null pointer argument in call to string copy function}}  in strncat_null_src()
562 …strncat(x, (char*)&strncat_fn, 4); // expected-warning{{Argument to string copy function is the ad…  in strncat_fn()
573   clang_analyzer_eval(strncat(x, y, strlen(y)) == x); // expected-warning{{TRUE}}  in strncat_effects()
580 …strncat(x, y, strlen(y)); // expected-warning{{Size argument is greater than the free space in the…  in strncat_overflow_0()
586 …strncat(x, y, strlen(y)); // expected-warning{{Size argument is greater than the free space in the…  in strncat_overflow_1()
592 …strncat(x, y, strlen(y)); // expected-warning{{Size argument is greater than the free space in the…  in strncat_overflow_2()
598 …strncat(x, y, 2); // expected-warning{{Size argument is greater than the free space in the destina…  in strncat_overflow_3()
603     strncat(x, y, strlen(y)); // no-warning  in strncat_no_overflow_1()
609     strncat(x, y, 1); // no-warning  in strncat_no_overflow_2()
613   strncat(dst, "1234", 5);  in strncat_symbolic_dst_length()
619   strncat(dst, src, 3);  in strncat_symbolic_src_length()
623 …strncat(dst2, src, 4); // expected-warning{{Size argument is greater than the free space in the de…  in strncat_symbolic_src_length()
628   strncat(dst, &src[offset], 3);  in strncat_unknown_src_length()
632 …strncat(dst2, &src[offset], 4); // expected-warning{{Size argument is greater than the free space …  in strncat_unknown_src_length()
641   strncat(dst, src, limit); // no-warning  in strncat_symbolic_limit()
650   strncat(dst, src, (size_t)limit); // no-warning  in strncat_unknown_limit()
662   strncat(dst, src, 2);  in strncat_too_big()
667   strncat(dst, src, 0); // no-warning  in strncat_zero()
673   strncat(dst, src, 4); // no-warning  in strncat_empty()