Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Added CodeSonar entry to Automated Detection section

...

Tool

Version

Checker

Description

CodeSonar
Include Page
CodeSonar_V
CodeSonar_V

LANG.MEM.BO

LANG.MEM.TO

MISC.MEM.NTERM

BADFUNC.BO.*

Buffer Overrun

Type Overrun

No Space For Null Terminator

A collection of warning classes that report uses of library functions prone to internal buffer overflows.

Compass/ROSE

 

 

Can detect violations of the rule. However, it is unable to handle cases involving strcpy_s() or manual string copies such as the one in the first example

Coverity6.5

STRING_OVERFLOW

STRING_SIZE

SECURE_CODING

Fully Implemented

Fully implemented

Fully implemented

Fortify SCA

5.0

 

 

Klocwork

Include Page
Klocwork_V
Klocwork_V

NNTS.TAINTED
SV.STRBO.GETS
SV.USAGERULES.UNBOUNDED_STRING_COPY

 

LDRA tool suite

Include Page
LDRA_V
LDRA_V

 

 

Splint

Include Page
Splint_V
Splint_V

 

 

PRQA QA-C
Include Page
PRQA_V
PRQA_V
warncall for 'gets'Partially implemented

...