...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
EXP53-CPP | High | Probable | Medium | P12 | L1 |
Automated Detection
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Clang |
| -Wuninitialized clang-analyzer-core.UndefinedBinaryOperatorResult | Does not catch all instances of this rule, such as uninitialized values read from heap-allocated memory. | ||||||
| CodeSonar |
| LANG.STRUCT.RPL | Return pointer to local Uninitialized variable | ||||||
| Klocwork |
| UNINIT.CTOR.MIGHT | |||||||
| LDRA tool suite |
| 53 D, 69 D, 631 S, 652 S | Partially implemented | ||||||
| Parasoft C/C++test |
| BDCERT_CPP-PB-NOTINITEXP53-a | Avoid use before initialization | ||||||
| Parasoft Insure++ | Runtime detection | ||||||||
| PRQA QA-C++ | 9.1 | 2961, 2962, 2963, 2966, 2967, 2968, 2971, 2972, 2973, 2976, 2977, 2978 | |||||||
| PVS-Studio |
| V546, V573, V614, V670, V679, V730, V788, V1007 |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...