...
The concatenation of wide and narrow string literals could lead to undefined behavior.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
STR10-C | Low | Probable | Medium | P4 | L3 |
Automated Detection
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| ECLAIR |
| CC2.STR10 | Fully implemented. | ||||||
| LDRA tool suite |
| 450 S | Fully implemented | ||||||
| Parasoft C/C++test |
|
|
|
| PB-38 | Fully implemented | |||||||
| PRQA QA-C |
| 874 |
| SonarQube C/C++ Plugin |
| NarrowAndWideStringConcat |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
Related Guidelines
| MISRA C++:2008 | Rule 2-13-5 |
Bibliography
| [ISO/IEC 9899:2011] | Section 6.4.5, "String Literals" |
...
...