...
Tool | Version | Checker | Description | |||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| Supported, but no explicit checker | ||||||||
| Clang |
| cert-msc30-c | Checked by clang-tidy | |||||||
| CodeSonar |
| BADFUNC.RANDOM.RAND | Use of rand | |||||||
| Compass/ROSE | ||||||||||
| Coverity |
| DONTCALL | Implemented - weak support | |||||||
| CC2.MSC30 | Fully implemented | ||||||||
| LDRA tool suite |
| 44 S | Enhanced enforcement | |||||||
| Parasoft C/C++test |
| SECURITY-02_b | CERT_C-MSC30-a | Do not use the rand() function for generating pseudorandom numbersFully implemented | ||||||
| Polyspace Bug Finder |
| Vulnerable pseudo-random number generator | Using a cryptographically weak pseudo-random number generator | |||||||
| PRQA QA-C |
| 5022 | Fully implemented |
...