...
Tool | Version | Checker | Description | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| signal-handler-unsafe-call | Partially checked | ||||||||||||
| Axivion Bauhaus Suite |
| CertC-SIG30 | |||||||||||||
| Compass/ROSE | Can detect violations of the rule for single-file programs | ||||||||||||||
| Helix QAC |
| ||||||||||||||
| LDRA tool suite |
| 88 D, 89 D | Partially implemented | ||||||||||||
| Parasoft C/C++test |
| CERT_C-SIG30-a | Properly define signal handlers | ||||||||||||
| PC-lint Plus |
| 2670, 2761 | Fully supported | ||||||||||||
| Checks for function called from signal handler not asynchronous-safe (rule fully covered) | ||||||||||||||
| PRQA QA-C |
| 2028, 2030 | |||||||||||||
| RuleChecker |
| signal-handler-unsafe-call | Partially checked | ||||||||||||
| Splint |
| Helix QAC | |||||||||||||
| Include Page | Helix QAC_V | Helix QAC
|
Related Vulnerabilities
For an overview of software vulnerabilities resulting from improper signal handling, see Michal Zalewski's paper "Delivering Signals for Fun and Profit" [Zalewski 2001].
...