...
A pointer validation function can be used to detect and prevent operations from being performed on some invalid pointers.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
MEM10-C | High | Unlikely | High | P3 | L3 |
Automated Detection
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| LDRA tool suite |
| 159 S | Enhanced enforcement | ||||||
| Polyspace Bug Finder |
| Memory allocation with tainted size | Size argument to memory function is from an unsecure source Pointer returned from dynamic allocation not checked for Pointer from an unsecure source may be NULL or point to unknown memory |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
Related Guidelines
| SEI CERT C++ Coding Standard | VOID MEM10-CPP. Define and use a pointer validation function |
| MITRE CWE | CWE-20, Improper Input Validation |
Bibliography
...
...