C28303
warning C28303: For C++ reference-parameter <parameter_name>, an ambiguous _Deref_ operator was found on <annotation>.
This warning similar to warning C28302 and is reported when an extra level of _Deref_ is used on a parameter.
SAL2 does not require the use of an extra level of _Deref_ when dealing with reference parameters. This particular annotation is ambiguous as to which level of dereference is intended to be annotated. It may be necessary to use _At_ to reference the specific object to be annotated.
Example
The following code generates this warning because the use of __deref_out_ecount(n) is ambiguous:
void ref(__deref_out_ecount(n) int **&buff, int &n)
The above annotation could be interpreted either as:
a reference to an array (of n) pointers to integers (SAL1 interpretation)
a reference to a pointer to an array (of n) integers (SAL2 interpretation)
Either of the following can correct this warning:
void ref(_Out_writes_(n) int **&buff, int &n)
// or
_At_(*buff), _Out_writes(n)) void ref(int **&buff, int &n)