...
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| IO.INJ.COMMAND | Command injection | ||||||
| Coverity | 6.5 | TAINTED_STRING | Fully implemented | ||||||
| Klocwork |
| ||||||||
| LDRA tool suite |
| 108 D, 109 D | Partially implemented | ||||||
| Parasoft C/C++test |
| BD-SECURITY-{TDCMD, BD-SECURITY-TDFNAMES, TDSQL}BD-SECURITY-TDSQL | Implemented | ||||||
| Polyspace Bug Finder | R2016a | Execution of externally controlled command | Command argument from an unsecure source vulnerable to operating system command injection Path argument from an unsecure source Using a library argument from an externally controlled path |
...