...
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| IO.INJ.FMT | Format string injection | ||||||
| Coverity |
| PW | Reports when the number of arguments differs from the number of required arguments according to the format string | ||||||
| GCC |
| Can detect violations of this recommendation when the | |||||||
| Klocwork |
| SV.FMT_STR.PRINT_FORMAT_MISMATCH.BAD SV.FMT_STR.SCAN_FORMAT_MISMATCH.BAD SV.FMT_STR.SCAN_FORMAT_MISMATCH.UNDESIRED SV.FMT_STR.SCAN_IMPROP_LENGTH SV.FMT_STR.SCAN_PARAMS_WRONGNUM.FEW SV.FMT_STR.SCAN_PARAMS_WRONGNUM.MANY SV.FMT_STR.UNKWN_FORMAT | |||||||
| LDRA tool suite |
| 486 S | Fully implemented | ||||||
| Parasoft C/C++test |
| PB-45,PB-46,PB-47,PB-48,PB-49,PB-50 | Fully implemented | ||||||
| PRQA QA-C |
| 0161, 0162, 0163, 0164, 0165, 0166, 0167, 0168, 0169, 0170, 0171, 0172, 0173, 0174, 0175, 0176, 0177, 0178, 0179 (U), 0180 (C99), 0184 (U), 0185 (U) | Partially implemented | ||||||
| PVS-Studio | 6.22 | V510, V576 | General analysis rule set |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...