Page History

IO.TAINT.SIZE
LANG.MEM.TBA
IO.TAINT.ADDR
IO.UT.HOST
IO.UT.PORT

(general)

Tainted allocation size
Tainted buffer access
Tainted network address
Untrusted Network Host
Untrusted Network Port

CodeSonar will track the tainted value, along with any limits applied to it, and flag any problems caused by underconstraint. Warnings of a wide range of classes may be triggered, including tainted allocation size, buffer overrun, and division by zero

C2794, C2804, C2854, C2859, C2864, C2894, C2899, C2904, C2909, C2914, C2924, C2944, C2949, C2954, C2956, C2959

CERT_C-INT04-a
CERT_C-INT04-b
CERT_C-INT04-c

Protect against integer overflow/underflow from tainted data
Avoid buffer read overflow from tainted data
Avoid buffer write overflow from tainted data

CERT C: Rec. INT04-C

Checks for:

• Array access with tainted index
• Loop bounded with tainted value
• Memory allocation with tainted size
• Tainted size of variable length array

Rec. partially supported.