Page History

CERT_C-ARR32-a

Ensure the size of the variable length array is in valid range

CERT C: Rule ARR32-C

Checks for:

• Memory allocation

• with tainted size
• Tainted size of variable length array

Size argument to memory function is from an unsecure source

Size of the variable-length array (VLA) is from an unsecure source and may be zero, negative, or too largeRule fully covered.

Context sensitive analysis
Will warn only if given size is negative