...
Tool | Version | Checker | Description | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| Supported, but no explicit checker | ||||||||||
| CodeSonar |
| ALLOC.UAF | Use after free | |||||||||
| Compass/ROSE | ||||||||||||
| USE_AFTER_FREE | Can detect the specific instances where memory is deallocated more than once or read/written to the target of a freed pointer | ||||||||||
| Klocwork |
| UFM.DEREF.MIGHT | ||||||||||
| LDRA tool suite |
| 51 D, 484 S, 112 D | Partially implemented | |||||||||
| Parasoft C/C++test |
| BD-RES-FREE | ||||||||||
| Parasoft Insure++ | Detects accessing freed memory at runtime | |||||||||||
| Polyspace Bug Finder | R2016a | Deallocation of previously deallocated pointer, Use of previously freed pointer | Memory freed more than once without allocation Memory accessed after deallocation | |||||||||
| Splint | | Include Page | | Splint_V | Splint_V | PRQA QA-C9.1 | 1769, 1770 | ||||||
| PRQA QA-C++ | 4.2 | 3339, 4303, 4304 | ||||||||||
| PVS-Studio | 6.22 | V586, V774 | ||||||||||
| Splint |
| General analysis rule set
Related Vulnerabilities
VU#623332 describes a double-free vulnerability in the MIT Kerberos 5 function krb5_recvauth().
...