...
Modifying string literals causes undefined behavior, resulting in abnormal program termination and denial-of-service vulnerabilities.
Recommendation | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
STR05-C | Low | Unlikely | Low | P3 | L3 |
Automated Detection
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| LANG.TYPE.NCS | Non-const string literal | ||||||
| Compass/ROSE |
| CC2.STR05 | Fully implemented | |||||||
| Klocwork |
| MISRA.STRING_LITERAL.NON_CONST.2012 |
| LDRA tool suite |
| 623 S | Fully implemented | ||||||
| Polyspace Bug Finder |
|
| Writing to const qualified object | Object declared with a | |||||||
| PRQA QA-C |
| 0752 | Partially implemented |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
Bibliography
...