SEI CERT C Coding Standard

Space shortcuts

Page tree

Versions Compared

Old Version 53

changes.mady.by.user Will Snavely

Saved on

compared with

New Version 54

changes.mady.by.user Svyatoslav Razmyslov

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Testing for exact values runs the risk of a loop terminating much longer than expected or never terminating at all.

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

MSC21-C

Low

Unlikely

Low

P3

L3

Automated Detection

Tool

Version

Checker

Description

Astrée
Include Page
Astrée_V
Astrée_V
 

Supported, but no explicit checker
CodeSonar
Include Page
CodeSonar_V
CodeSonar_V

LANG.STRUCT.LOOP.HR
LANG.STRUCT.LOOP.UB

High risk loop
Potential unbounded loop

Compass/ROSE

 

 

 




LDRA tool suite
Include Page
LDRA_V
LDRA_V
510 SPartially implemented
Polyspace Bug FinderR2016a

Loop bounded with tainted value

Tainted sign change conversion

Loop controlled by a value from an unsecure source

Value from an unsecure source changes sign

PVS-Studio6.22V621General analysis rule

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

Related Guidelines

SEI CERT C++ Coding StandardVOID MSC21-CPP. Use inequality to terminate a loop whose counter changes by more than one
CERT Oracle Secure Coding Standard for JavaMSC54-J. Avoid inadvertent wrapping of loop counters

...


...