...
| Code Block | ||
|---|---|---|
| ||
#include <stdlib.h>
/* // ... */
char *p = malloc(10);
|
...
| Code Block | ||
|---|---|---|
| ||
func(1, 2);
/* // ... */
int func(int one, int two, int three){
printf("%d %d %d", one, two, three);
return 1;
}
|
...
| Code Block | ||
|---|---|---|
| ||
int func(int, int, int); /* // ... */ func(1, 2, 3); /* // ... */ int func(int one, int two, int three){ printf("%d %d %d", one, two, three); return 1; } |
...
| Code Block | ||
|---|---|---|
| ||
int add(int x, int y, int z) {
return x + y + z;
}
int main(int argc, char *argv[]) {
int (*fn_ptr) (int, int);
int res;
fn_ptr = add;
res = fn_ptr(2, 3); /* incorrect */
/* // ... */
return 0;
}
|
Compliant Solution: (function pointers)
...
| Code Block | ||
|---|---|---|
| ||
int add(int x, int y, int z) {
return x + y + z;
}
int main(int argc, char *argv[]) {
int (*fn_ptr) (int, int, int) ;
int res;
fn_ptr = add;
res = fn_ptr(2, 3, 4);
/* // ... */
return 0;
}
|
Risk Assessment
...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
DCL31 DCL07-C A | 1 (low) | 1 (unlikely) | 3 (low) | P3 | L3 |
...
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
References
| Wiki Markup |
|---|
\[[ISO/IEC 9899-1999:TC2|AA. C References#ISO/IEC 9899-1999TC2]\] Forward, Section 6.9.1, "Function definitions" \[[Spinellis 06|AA. C References#Spinellis 06]\] Section 2.6.1, "Incorrect Routine or Arguments" |