Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Linked to FIO00-C.

Wiki Markup
According to Section 2 of Annex J of \[[ISO/IEC 9899:1999|AA. C References#ISO/IEC 9899-1999]\], the behavior a program is [undefined | BB. Definitions#undefined behavior] in the circumstances outlined the table below. The "Guidelines" column in the table identifies the guideline(s) that address the specific case of undefined behavior (UB).  The parenthesized section numbers refers to the section of the C99 standard that identifies the undefined behavior.

UB

Description

Guidelines

1

Anchor
ub_1
ub_1

A "shall" or "shall not" requirement that appears outside of a constraint is violated (clause 4).

MSC15-C

2

Anchor
ub_2
ub_2

A nonempty source file does not end in a new-line character which is not immediately preceded by a backslash character or ends in a partial preprocessing token or comment (5.1.1.2).

 

3

Anchor
ub_3
ub_3

Token concatenation produces a character sequence matching the syntax of a universal character name (5.1.1.2).

PRE30-C

4

Anchor
ub_4
ub_4

A program in a hosted environment does not define a function named main using one of the specified forms (5.1.2.2.1).

 

5

Anchor
ub_5
ub_5

A character not in the basic source character set is encountered in a source file, except in an identifier, a character constant, a string literal, a header name, a comment, or a preprocessing token that is never converted to a token (5.2.1).

 

6

Anchor
ub_6
ub_6

An identifier, comment, string literal, character constant, or header name contains an invalid multibyte character or does not begin and end in the initial shift state (5.2.1.2).

 

7

Anchor
ub_7
ub_7

The same identifier has both internal and external linkage in the same translation unit (6.2.2).

DCL36-C

8

Anchor
ub_8
ub_8

An object is referred to outside of its lifetime (6.2.4).

DCL30-C

9

Anchor
ub_9
ub_9

The value of a pointer to an object whose lifetime has ended is used (6.2.4).

DCL30-C

10

Anchor
ub_10
ub_10

The value of an object with automatic storage duration is used while it is indeterminate (6.2.4, 6.7.8, 6.8).

EXP33-C

11

Anchor
ub_11
ub_11

A trap representation is read by an lvalue expression that does not have character type (6.2.6.1).

EXP33-C

12

Anchor
ub_12
ub_12

A trap representation is produced by a side effect that modifies any part of the object using an lvalue expression that does not have character type (6.2.6.1).

 

13

Anchor
ub_13
ub_13

The arguments to certain operators are such that could produce a negative zero result, but the implementation does not support negative zeros (6.2.6.2).

 

14

Anchor
ub_14
ub_14

Two declarations of the same object or function specify types that are not compatible (6.2.7).

DCL32-C

15

Anchor
ub_15
ub_15

Conversion to or from an integer type produces a value outside the range that can be represented (6.3.1.4).

FLP34-C

16

Anchor
ub_16
ub_16

Demotion of one real floating type to another produces a value outside the range that can be represented (6.3.1.5).

FLP34-C

17

Anchor
ub_17
ub_17

An lvalue does not designate an object when evaluated (6.3.2.1).

 

18

Anchor
ub_18
ub_18

A non-array lvalue with an incomplete type is used in a context that requires the value of the designated object (6.3.2.1).

 

19

Anchor
ub_19
ub_19

An lvalue having array type is converted to a pointer to the initial element of the array, and the array object has register storage class (6.3.2.1).

 

20

Anchor
ub_20
ub_20

An attempt is made to use the value of a void expression, or an implicit or explicit conversion (except to void) is applied to a void expression (6.3.2.2).

 

21

Anchor
ub_21
ub_21

Conversion of a pointer to an integer type produces a value outside the range that can be represented (6.3.2.3).

INT11-C

22

Anchor
ub_22
ub_22

Conversion between two pointer types produces a result that is incorrectly aligned (6.3.2.3).

EXP36-C

23

Anchor
ub_23
ub_23

A pointer is used to call a function whose type is not compatible with the pointed-to type (6.3.2.3).

DCL35-C

24

Anchor
ub_24
ub_24

An unmatched ' or " character is encountered on a logical source line during tokenization (6.4).

 

25

Anchor
ub_25
ub_25

A reserved keyword token is used in translation phase 7 or 8 for some purpose other than as a keyword (6.4.1).

 

26

Anchor
ub_26
ub_26

A universal character name in an identifier does not designate a character whose encoding falls into one of the specified ranges (6.4.2.1).

 

27

Anchor
ub_27
ub_27

The initial character of an identifier is a universal character name designating a digit (6.4.2.1).

 

28

Anchor
ub_28
ub_28

Two identifiers differ only in nonsignificant characters (6.4.2.1).

DCL32-C

29

Anchor
ub_29
ub_29

The identifier _func_ is explicitly declared (6.4.2.2).

 

30

Anchor
ub_30
ub_30

The program attempts to modify a string literal (6.4.5).

STR30-C

31

Anchor
ub_31
ub_31

The characters ', back-slash, ", /, or /* occur in the sequence between the < and > delimiters, or the characters ', back-slash, //, or /* occur in the sequence between the " delimiters, in a header name preprocessing token (6.4.7).

 

32

Anchor
ub_32
ub_32

Between two sequence points, an object is modified more than once, or is modified and the prior value is read other than to determine the value to be stored (6.5).

EXP30-C

33

Anchor
ub_33
ub_33

An exceptional condition occurs during the evaluation of an expression (6.5).

 

34

Anchor
ub_34
ub_34

An object has its stored value accessed other than by an lvalue of an allowable type (6.5).

EXP39-C

35

Anchor
ub_35
ub_35

An attempt is made to modify the result of a function call, a conditional operator, an assignment operator, or a comma operator, or to access it after the next sequence point (6.5.2.2, 6.5.15, 6.5.16, 6.5.17).

EXP35-C

36

Anchor
ub_36
ub_36

For a call to a function without a function prototype in scope, the number of arguments does not equal the number of parameters (6.5.2.2).

 

37

Anchor
ub_37
ub_37

For call to a function without a function prototype in scope where the function is defined with a function prototype, either the prototype ends with an ellipsis or the types of the arguments after promotion are not compatible with the types of the parameters (6.5.2.2).

 

38

Anchor
ub_38
ub_38

For a call to a function without a function prototype in scope where the function is not defined with a function prototype, the types of the arguments after promotion are not compatible with those of the parameters after promotion (with certain exceptions) (6.5.2.2).

 

39

Anchor
ub_39
ub_39

A function is defined with a type that is not compatible with the type (of the expression) pointed to by the expression that denotes the called function (6.5.2.2).

 

40

Anchor
ub_40
ub_40

The operand of the unary * operator has an invalid value (6.5.3.2).

 

41

Anchor
ub_41
ub_41

A pointer is converted to other than an integer or pointer type (6.5.4).

 

42

Anchor
ub_42
ub_42

The value of the second operand of the / or % operator is zero (6.5.5).

INT33-C

43

Anchor
ub_43
ub_43

Addition or subtraction of a pointer into, or just beyond, an array object and an integer type produces a result that does not point into, or just beyond, the same array object (6.5.6).

ARR30-C , ARR35-C , ARR38-C

44

Anchor
ub_44
ub_44

Addition or subtraction of a pointer into, or just beyond, an array object and an integer type produces a result that points just beyond the array object and is used as the operand of a unary * operator that is evaluated (6.5.6).

ARR30-C , ARR35-C

45

Anchor
ub_45
ub_45

Pointers that do not point into, or just beyond, the same array object are subtracted (6.5.6).

ARR36-C

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="43174d57344e8ef3-6d401086-47554bcb-a4829b98-9362c0c23d3b1672f48526a2"><ac:plain-text-body><![CDATA[

46

Anchor
ub_46
ub_46

An array subscript is out of range, even if an object is apparently accessible with the given subscript (as in the lvalue expression a[1][7] given the declaration int a[4][5]) (6.5.6).

 

]]></ac:plain-text-body></ac:structured-macro>

47

Anchor
ub_47
ub_47

The result of subtracting two pointers is not representable in an object of type ptrdiff_t (6.5.6).

 

48

Anchor
ub_48
ub_48

An expression is shifted by a negative number or by an amount greater than or equal to the width of the promoted expression (6.5.7).

INT34-C

49

Anchor
ub_49
ub_49

An expression having signed promoted type is left-shifted and either the value of the expression is negative or the result of shifting would be not be representable in the promoted type (6.5.7).

 

50

Anchor
ub_50
ub_50

Pointers that do not point to the same aggregate or union (nor just beyond the same array object) are compared using relational operators (6.5.8).

ARR36-C

51

Anchor
ub_51
ub_51

An object is assigned to an inexactly overlapping object or to an exactly overlapping object with incompatible type (6.5.16.1).

 

52

Anchor
ub_52
ub_52

An expression that is required to be an integer constant expression does not have an integer type; has operands that are not integer constants, enumeration constants, character constants, sizeof expressions whose results are integer constants, or immediately-cast floating constants; or contains casts (outside operands to sizeof operators) other than conversions of arithmetic types to integer types (6.6).

 

53

Anchor
ub_53
ub_53

A constant expression in an initializer is not, or does not evaluate to, one of the following: an arithmetic constant expression, a null pointer constant, an address constant, or an address constant for an object type plus or minus an integer constant expression (6.6).

 

54

Anchor
ub_54
ub_54

An arithmetic constant expression does not have arithmetic type; has operands that are not integer constants, floating constants, enumeration constants, character constants, or sizeof expressions; or contains casts (outside operands to sizeof operators) other than conversions of arithmetic types to arithmetic types (6.6).

 

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="720add52c2f64b19-a8c0b51c-419c4c4f-b93eaa37-50fdfdcba1f1f6514d8cc4ed"><ac:plain-text-body><![CDATA[

55

Anchor
ub_55
ub_55

The value of an object is accessed by an array-subscript [], member-access . or ->, address &, or indirection * operator or a pointer cast in creating an address constant (6.6).

 

]]></ac:plain-text-body></ac:structured-macro>

56

Anchor
ub_56
ub_56

An identifier for an object is declared with no linkage and the type of the object is incomplete after its declarator, or after its init-declarator if it has an initializer (6.7).

 

57

Anchor
ub_57
ub_57

A function is declared at block scope with an explicit storage-class specifier other than extern (6.7.1).

 

58

Anchor
ub_58
ub_58

A structure or union is defined as containing no named members (6.7.2.1).

 

59

Anchor
ub_59
ub_59

An attempt is made to access, or generate a pointer to just past, a flexible array member of a structure when the referenced object provides no elements for that array (6.7.2.1).

 

60

Anchor
ub_60
ub_60

When the complete type is needed, an incomplete structure or union type is not completed in the same scope by another declaration of the tag that defines the content (6.7.2.3).

 

61

Anchor
ub_61
ub_61

An attempt is made to modify an object defined with a const-qualified type through use of an lvalue with non-const-qualified type (6.7.3).

EXP05-C , EXP40-C

62

Anchor
ub_62
ub_62

An attempt is made to refer to an object defined with a volatile-qualified type through use of an lvalue with non-volatile-qualified type (6.7.3).

EXP32-C

63

Anchor
ub_63
ub_63

The specification of a function type includes any type qualifiers (6.7.3).

 

64

Anchor
ub_64
ub_64

Two qualified types that are required to be compatible do not have the identically qualified version of a compatible type (6.7.3).

 

65

Anchor
ub_65
ub_65

An object which has been modified is accessed through a restrict-qualified pointer to a const-qualified type, or through a restrict-qualified pointer and another pointer that are not both based on the same object (6.7.3.1).

DCL33-C

66

Anchor
ub_66
ub_66

A restrict-qualified pointer is assigned a value based on another restricted pointer whose associated block neither began execution before the block associated with this pointer, nor ended before the assignment (6.7.3.1).

 

67

Anchor
ub_67
ub_67

A function with external linkage is declared with an inline function specifier, but is not also defined in the same translation unit (6.7.4).

 

68

Anchor
ub_68
ub_68

Two pointer types that are required to be compatible are not identically qualified, or are not pointers to compatible types (6.7.5.1).

 

69

Anchor
ub_69
ub_69

The size expression in an array declaration is not a constant expression and evaluates at program execution time to a nonpositive value (6.7.5.2).

ARR32-C

70

Anchor
ub_70
ub_70

In a context requiring two array types to be compatible, they do not have compatible element types, or their size specifiers evaluate to unequal values (6.7.5.2).

ARR34-C

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="332a2b6504ca9f29-7020e71a-4ceb4fec-a7f1913d-9828761e8cf29aa3674cbcc5"><ac:plain-text-body><![CDATA[

71

Anchor
ub_71
ub_71

A declaration of an array parameter includes the keyword static within the [ and ] and the corresponding argument does not provide access to the first element of an array with at least the specified number of elements (6.7.5.3).

 

]]></ac:plain-text-body></ac:structured-macro>

72

Anchor
ub_72
ub_72

A storage-class specifier or type qualifier modifies the keyword void as a function parameter type list (6.7.5.3).

 

73

Anchor
ub_73
ub_73

In a context requiring two function types to be compatible, they do not have compatible return types, or their parameters disagree in use of the ellipsis terminator or the number and type of parameters (after default argument promotion, when there is no parameter type list or when one type is specified by a function definition with an identifier list) (6.7.5.3).

 

74

Anchor
ub_74
ub_74

The value of an unnamed member of a structure or union is used (6.7.8).

 

75

Anchor
ub_75
ub_75

The initializer for a scalar is neither a single expression nor a single expression enclosed in braces (6.7.8).

 

76

Anchor
ub_76
ub_76

The initializer for a structure or union object that has automatic storage duration is neither an initializer list nor a single expression that has compatible structure or union type (6.7.8).

 

77

Anchor
ub_77
ub_77

The initializer for an aggregate or union, other than an array initialized by a string literal, is not a brace-enclosed list of initializers for its elements or members (6.7.8).

 

78

Anchor
ub_78
ub_78

An identifier with external linkage is used, but in the program there does not exist exactly one external definition for the identifier, or the identifier is not used and there exist multiple external definitions for the identifier (6.9).

 

79

Anchor
ub_79
ub_79

A function definition includes an identifier list, but the types of the parameters are not declared in a following declaration list (6.9.1).

 

80

Anchor
ub_80
ub_80

An adjusted parameter type in a function definition is not an object type (6.9.1).

 

81

Anchor
ub_81
ub_81

A function that accepts a variable number of arguments is defined without a parameter type list that ends with the ellipsis notation (6.9.1).

 

82

Anchor
ub_82
ub_82

The } that terminates a function is reached, and the value of the function call is used by the caller (6.9.1).

 

83

Anchor
ub_83
ub_83

An identifier for an object with internal linkage and an incomplete type is declared with a tentative definition (6.9.2).

 

84

Anchor
ub_84
ub_84

The token defined is generated during the expansion of a #if or #elif preprocessing directive, or the use of the defined unary operator does not match one of the two specified forms prior to macro replacement (6.10.1).

 

85

Anchor
ub_85
ub_85

The #include preprocessing directive that results after expansion does not match one of the two header name forms (6.10.2).

 

86

Anchor
ub_86
ub_86

The character sequence in an #include preprocessing directive does not start with a letter (6.10.2).

 

87

Anchor
ub_87
ub_87

There are sequences of preprocessing tokens within the list of macro arguments that would otherwise act as preprocessing directives (6.10.3).

PRE32-C

88

Anchor
ub_88
ub_88

The result of the preprocessing operator # is not a valid character string literal (6.10.3.2).

 

89

Anchor
ub_89
ub_89

The result of the preprocessing operator ## is not a valid preprocessing token (6.10.3.3).

 

90

Anchor
ub_90
ub_90

The #line preprocessing directive that results after expansion does not match one of the two well-defined forms, or its digit sequence specifies zero or a number greater than 2147483647 (6.10.4).

 

91

Anchor
ub_91
ub_91

A non-STDC #pragma preprocessing directive that is documented as causing translation failure or some other form of undefined behavior is encountered (6.10.6).

 

92

Anchor
ub_92
ub_92

A #pragma STDC preprocessing directive does not match one of the well-defined forms (6.10.6).

 

93

Anchor
ub_93
ub_93

The name of a predefined macro, or the identifier defined, is the subject of a #define or #undef preprocessing directive (6.10.8).

 

94

Anchor
ub_94
ub_94

An attempt is made to copy an object to an overlapping object by use of a library function, other than as explicitly allowed (e.g., memmove) (clause 7).

 

95

Anchor
ub_95
ub_95

A file with the same name as one of the standard headers, not provided as part of the implementation, is placed in any of the standard places that are searched for included source files (7.1.2).

 

96

Anchor
ub_96
ub_96

A header is included within an external declaration or definition (7.1.2).

 

97

Anchor
ub_97
ub_97

A function, object, type, or macro that is specified as being declared or defined by some standard header is used before any header that declares or defines it is included (7.1.2).

 

98

Anchor
ub_98
ub_98

A standard header is included while a macro is defined with the same name as a keyword (7.1.2).

 

99

Anchor
ub_99
ub_99

The program attempts to declare a library function itself, rather than via a standard header, but the declaration does not have external linkage (7.1.2).

 

100

Anchor
ub_100
ub_100

The program declares or defines a reserved identifier, other than as allowed by 7.1.4 (7.1.3).

DCL37-C

101

Anchor
ub_101
ub_101

The program removes the definition of a macro whose name begins with an underscore and either an uppercase letter or another underscore (7.1.3).

 

102

Anchor
ub_102
ub_102

An argument to a library function has an invalid value or a type not expected by a function with variable number of arguments (7.1.4).

 

103

Anchor
ub_103
ub_103

The pointer passed to a library function array parameter does not have a value such that all address computations and object accesses are valid (7.1.4).

 

104

Anchor
ub_104
ub_104

The macro definition of assert is suppressed in order to access an actual function (7.2).

 

105

Anchor
ub_105
ub_105

The argument to the assert macro does not have a scalar type (7.2).

 

106

Anchor
ub_106
ub_106

The CX_LIMITED_RANGE, FENV_ACCESS, or FP_CONTRACT pragma is used in any context other than outside all external declarations or preceding all explicit declarations and statements inside a compound statement (7.3.4, 7.6.1, 7.12.2).

 

107

Anchor
ub_107
ub_107

The value of an argument to a character handling function is neither equal to the value of EOF nor representable as an unsigned char (7.4).

STR37-C

108

Anchor
ub_108
ub_108

A macro definition of errno is suppressed in order to access an actual object, or the program defines an identifier with the name errno (7.5).

ERR31-C

109

Anchor
ub_109
ub_109

Part of the program tests floating-point status flags, sets floating-point control modes, or runs under non-default mode settings, but was translated with the state for the FENV_ACCESS pragma "off" (7.6.1).

 

110

Anchor
ub_110
ub_110

The exception-mask argument for one of the functions that provide access to the floating-point status flags has a nonzero value not obtained by bitwise OR of the floating-point exception macros (7.6.2).

 

111

Anchor
ub_111
ub_111

The fesetexceptflag function is used to set floating-point status flags that were not specified in the call to the fegetexceptflag function that provided the value of the corresponding fexcept_t object (7.6.2.4).

 

112

Anchor
ub_112
ub_112

The argument to fesetenv or feupdateenv is neither an object set by a call to fegetenv or feholdexcept, nor is it an environment macro (7.6.4.3, 7.6.4.4).

 

113

Anchor
ub_113
ub_113

The value of the result of an integer arithmetic or conversion function cannot be represented (7.8.2.1, 7.8.2.2, 7.8.2.3, 7.8.2.4, 7.20.6.1, 7.20.6.2, 7.20.1).

ERR07-C

114

Anchor
ub_114
ub_114

The program modifies the string pointed to by the value returned by the setlocale function (7.11.1.1).

ENV30-C

115

Anchor
ub_115
ub_115

The program modifies the structure pointed to by the value returned by the localeconv function (7.11.2.1).

ENV30-C

116

Anchor
ub_116
ub_116

A macro definition of math_errhandling is suppressed or the program defines an identifier with the name math_errhandling (7.12).

 

117

Anchor
ub_117
ub_117

An argument to a floating-point classification or comparison macro is not of real floating type (7.12.3, 7.12.14).

 

118

Anchor
ub_118
ub_118

A macro definition of setjmp is suppressed in order to access an actual function, or the program defines an external identifier with the name setjmp (7.13).

 

119

Anchor
ub_119
ub_119

An invocation of the setjmp macro occurs other than in an allowed context (7.13.2.1).

 

120

Anchor
ub_120
ub_120

The longjmp function is invoked to restore a nonexistent environment (7.13.2.1).

 

121

Anchor
ub_121
ub_121

After a longjmp, there is an attempt to access the value of an object of automatic storage class with non-volatile-qualified type, local to the function containing the invocation of the corresponding setjmp macro, that was changed between the setjmp invocation and longjmp call (7.13.2.1).

 

122

Anchor
ub_122
ub_122

The program specifies an invalid pointer to a signal handler function (7.14.1.1).

 

123

Anchor
ub_123
ub_123

A signal handler returns when the signal corresponded to a computational exception (7.14.1.1).

SIG31-C

124

Anchor
ub_124
ub_124

A signal occurs as the result of calling the abort or raise function, and the signal handler calls the raise function (7.14.1.1).

SIG33-C

125

Anchor
ub_125
ub_125

A signal occurs other than as the result of calling the abort or raise function, and the signal handler refers to an object with static storage duration other than by assigning a value to an object declared as volatile sig_atomic_t, or calls any function in the standard library other than the abort function, the _Exit function, or the signal function (for the same signal number) (7.14.1.1).

SIG31-C

126

Anchor
ub_126
ub_126

The value of errno is referred to after a signal occurred other than as the result of calling the abort or raise function and the corresponding signal handler obtained a SIG_ERR return from a call to the signal function (7.14.1.1).

ERR32-C

127

Anchor
ub_127
ub_127

A signal is generated by an asynchronous signal handler (7.14.1.1).

 

128

Anchor
ub_128
ub_128

A function with a variable number of arguments attempts to access its varying arguments other than through a properly declared and initialized va_list object, or before the va_start macro is invoked (7.15, 7.15.1.1, 7.15.1.4).

 

129

Anchor
ub_129
ub_129

The macro va_arg is invoked using the parameter ap that was passed to a function that invoked the macro va_arg with the same parameter (7.15).

 

130

Anchor
ub_130
ub_130

A macro definition of va_start, va_arg, va_copy, or va_end is suppressed in order to access an actual function, or the program defines an external identifier with the name va_copy or va_end (7.15.1).

 

131

Anchor
ub_131
ub_131

The va_start or va_copy macro is invoked without a corresponding invocation of the va_end macro in the same function, or vice versa (7.15.1, 7.15.1.2, 7.15.1.3, 7.15.1.4).

 

132

Anchor
ub_132
ub_132

The type parameter to the va_arg macro is not such that a pointer to an object of that type can be obtained simply by postfixing a * (7.15.1.1).

 

133

Anchor
ub_133
ub_133

The va_arg macro is invoked when there is no actual next argument, or with a specified type that is not compatible with the promoted type of the actual next argument, with certain exceptions (7.15.1.1).

DCL10-C

134

Anchor
ub_134
ub_134

The va_copy or va_start macro is called to initialize a va_list that was previously initialized by either macro without an intervening invocation of the va_end macro for the same va_list (7.15.1.2, 7.15.1.4).

 

135

Anchor
ub_135
ub_135

The parameter parmN of a va_start macro is declared with the register storage class, with a function or array type, or with a type that is not compatible with the type that results after application of the default argument promotions (7.15.1.4).

 

136

Anchor
ub_136
ub_136

The member designator parameter of an offsetof macro is an invalid right operand of the . operator for the type parameter, or designates a bit-field (7.17).

EXP38-C

137

Anchor
ub_137
ub_137

The argument in an instance of one of the integer-constant macros is not a decimal, octal, or hexadecimal constant, or it has a value that exceeds the limits for the corresponding type (7.18.4).

 

138

Anchor
ub_138
ub_138

A byte input/output function is applied to a wide-oriented stream, or a wide character input/output function is applied to a byte-oriented stream (7.19.2).

 

139

Anchor
ub_139
ub_139

Use is made of any portion of a file beyond the most recent wide character written to a wide-oriented stream (7.19.2).

 

140

Anchor
ub_140
ub_140

The value of a pointer to a FILE object is used after the associated file is closed (7.19.3).

 

141

Anchor
ub_141
ub_141

The stream for the fflush function points to an input stream or to an update stream in which the most recent operation was input (7.19.5.2).

 

142

Anchor
ub_142
ub_142

The string pointed to by the mode argument in a call to the fopen function does not exactly match one of the specified character sequences (7.19.5.3).

 

143

Anchor
ub_143
ub_143

An output operation on an update stream is followed by an input operation without an intervening call to the fflush function or a file positioning function, or an input operation on an update stream is followed by an output operation with an intervening call to a file positioning function (7.19.5.3).

FIO39-C

144

Anchor
ub_144
ub_144

An attempt is made to use the contents of the array that was supplied in a call to the setvbuf function (7.19.5.6).

 

145

Anchor
ub_145
ub_145

There are insufficient arguments for the format in a call to one of the formatted input/output functions, or an argument does not have an appropriate type (7.19.6.1, 7.19.6.2, 7.24.2.1, 7.24.2.2).

FIO00-C

146

Anchor
ub_146
ub_146

The format in a call to one of the formatted input/output functions or to the strftime or wcsftime function is not a valid multibyte character sequence that begins and ends in its initial shift state (7.19.6.1, 7.19.6.2, 7.23.3.5, 7.24.2.1, 7.24.2.2, 7.24.5.1).

 

147

Anchor
ub_147
ub_147

In a call to one of the formatted output functions, a precision appears with a conversion specifier other than those described (7.19.6.1, 7.24.2.1).

 

148

Anchor
ub_148
ub_148

A conversion specification for a formatted output function uses an asterisk to denote an argument-supplied field width or precision, but the corresponding argument is not provided (7.19.6.1, 7.24.2.1).

 

149

Anchor
ub_149
ub_149

A conversion specification for a formatted output function uses a # or 0 flag with a conversion specifier other than those described (7.19.6.1, 7.24.2.1).

FIO00-C

150

Anchor
ub_150
ub_150

A conversion specification for one of the formatted input/output functions uses a length modifier with a conversion specifier other than those described (7.19.6.1, 7.19.6.2, 7.24.2.1, 7.24.2.2).

FIO00-C

151

Anchor
ub_151
ub_151

An s conversion specifier is encountered by one of the formatted output functions, and the argument is missing the null terminator (unless a precision is specified that does not require null termination) (7.19.6.1, 7.24.2.1).

 

152

Anchor
ub_152
ub_152

An n conversion specification for one of the formatted input/output functions includes any flags, an assignment-suppressing character, a field width, or a precision (7.19.6.1, 7.19.6.2, 7.24.2.1, 7.24.2.2).

 

153

Anchor
ub_153
ub_153

A % conversion specifier is encountered by one of the formatted input/output functions, but the complete conversion specification is not exactly %% (7.19.6.1, 7.19.6.2, 7.24.2.1, 7.24.2.2).

FIO00-C

154

Anchor
ub_154
ub_154

An invalid conversion specification is found in the format for one of the formatted input/output functions, or the strftime or wcsftime function (7.19.6.1, 7.19.6.2, 7.23.3.5, 7.24.2.1, 7.24.2.2, 7.24.5.1).

FIO00-C

155

Anchor
ub_155
ub_155

The number of characters transmitted by a formatted output function is greater than INT_MAX (7.19.6.1, 7.19.6.3, 7.19.6.8, 7.19.6.10).

 

156

Anchor
ub_156
ub_156

The result of a conversion by one of the formatted input functions cannot be represented in the corresponding object, or the receiving object does not have an appropriate type (7.19.6.2, 7.24.2.2).

 

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="23bcdefe1966420d-6381cf8d-4b89449b-8bb6a4fa-a294a421f11891010313525b"><ac:plain-text-body><![CDATA[

157

Anchor
ub_157
ub_157

A c, s, or [ conversion specifier is encountered by one of the formatted input functions, and the array pointed to by the corresponding argument is not large enough to accept the input sequence (and a null terminator if the conversion specifier is s or [) (7.19.6.2, 7.24.2.2).

 

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="e0650c311640dd46-3c210ded-4d7e4c61-8eb4a1db-4d9054b151fa9dc54b2304d9"><ac:plain-text-body><![CDATA[

158

Anchor
ub_158
ub_158

A c, s, or [ conversion specifier with an l qualifier is encountered by one of the formatted input functions, but the input is not a valid multibyte character sequence that begins in the initial shift state (7.19.6.2, 7.24.2.2).

 

]]></ac:plain-text-body></ac:structured-macro>

159

Anchor
ub_159
ub_159

The input item for a %p conversion by one of the formatted input functions is not a value converted earlier during the same program execution (7.19.6.2, 7.24.2.2).

 

160

Anchor
ub_160
ub_160

The vfprintf, vfscanf, vprintf, vscanf, vsnprintf, vsprintf, vsscanf, vfwprintf, vfwscanf, vswprintf, vswscanf, vwprintf, or vwscanf function is called with an improperly initialized va_list argument, or the argument is used (other than in an invocation of va_end) after the function returns (7.19.6.8, 7.19.6.9, 7.19.6.10, 7.19.6.11, 7.19.6.12, 7.19.6.13, 7.19.6.14, 7.24.2.5, 7.24.2.6, 7.24.2.7, 7.24.2.8, 7.24.2.9, 7.24.2.10).

 

161

Anchor
ub_161
ub_161

The contents of the array supplied in a call to the fgets, gets, or fgetws function are used after a read error occurred (7.19.7.2, 7.19.7.7, 7.24.3.2).

FIO40-C

162

Anchor
ub_162
ub_162

The file position indicator for a binary stream is used after a call to the ungetc function where its value was zero before the call (7.19.7.11).

 

163

Anchor
ub_163
ub_163

The file position indicator for a stream is used after an error occurred during a call to the fread or fwrite function (7.19.8.1, 7.19.8.2).

 

164

Anchor
ub_164
ub_164

A partial element read by a call to the fread function is used (7.19.8.1).

 

165

Anchor
ub_165
ub_165

The fseek function is called for a text stream with a nonzero offset and either the offset was not returned by a previous successful call to the ftell function on a stream associated with the same file or whence is not SEEK_SET (7.19.9.2).

 

166

Anchor
ub_166
ub_166

The fsetpos function is called to set a position that was not returned by a previous successful call to the fgetpos function on a stream associated with the same file (7.19.9.3).

 

167

Anchor
ub_167
ub_167

A non-null pointer returned by a call to the calloc, malloc, or realloc function with a zero requested size is used to access an object (7.20.3).

 

168

Anchor
ub_168
ub_168

The value of a pointer that refers to space deallocated by a call to the free or realloc function is used (7.20.3).

MEM30-C

169

Anchor
ub_169
ub_169

The pointer argument to the free or realloc function does not match a pointer earlier returned by calloc, malloc, or realloc, or the space has been deallocated by a call to free or realloc (7.20.3.2, 7.20.3.4).

MEM31-C , MEM34-C

170

Anchor
ub_170
ub_170

The value of the object allocated by the malloc function is used (7.20.3.3).

 

171

Anchor
ub_171
ub_171

The value of any bytes in a new object allocated by the realloc function beyond the size of the old object are used (7.20.3.4).

 

172

Anchor
ub_172
ub_172

The program executes more than one call to the exit function (7.20.4.3).

ENV32-C

173

Anchor
ub_173
ub_173

During the call to a function registered with the atexit function, a call is made to the longjmp function that would terminate the call to the registered function (7.20.4.3).

 

174

Anchor
ub_174
ub_174

The string set up by the getenv or strerror function is modified by the program (7.20.4.5, 7.21.6.2).

ENV30-C

175

Anchor
ub_175
ub_175

A command is executed through the system function in a way that is documented as causing termination or some other form of undefined behavior (7.20.4.6).

 

176

Anchor
ub_176
ub_176

A searching or sorting utility function is called with an invalid pointer argument, even if the number of elements is zero (7.20.5).

 

177

Anchor
ub_177
ub_177

The comparison function called by a searching or sorting utility function alters the contents of the array being searched or sorted, or returns ordering values inconsistently (7.20.5).

 

178

Anchor
ub_178
ub_178

The array being searched by the bsearch function does not have its elements in proper order (7.20.5.1).

 

179

Anchor
ub_179
ub_179

The current conversion state is used by a multibyte/wide character conversion function after changing the LC_CTYPE category (7.20.7).

 

180

Anchor
ub_180
ub_180

A string or wide string utility function is instructed to access an array beyond the end of an object (7.21.1, 7.24.4).

STR35-C

181

Anchor
ub_181
ub_181

A string or wide string utility function is called with an invalid pointer argument, even if the length is zero (7.21.1, 7.24.4).

 

182

Anchor
ub_182
ub_182

The contents of the destination array are used after a call to the strxfrm, strftime, wcsxfrm, or wcsftime function in which the specified length was too small to hold the entire null-terminated result (7.21.4.5, 7.23.3.5, 7.24.4.4.4, 7.24.5.1).

 

183

Anchor
ub_183
ub_183

The first argument in the very first call to the strtok or wcstok is a null pointer (7.21.5.8, 7.24.4.5.7).

 

184

Anchor
ub_184
ub_184

The type of an argument to a type-generic macro is not compatible with the type of the corresponding parameter of the selected function (7.22).

 

185

Anchor
ub_185
ub_185

A complex argument is supplied for a generic parameter of a type-generic macro that has no corresponding complex function (7.22).

 

186

Anchor
ub_186
ub_186

The argument corresponding to an s specifier without an l qualifier in a call to the fwprintf function does not point to a valid multibyte character sequence that begins in the initial shift state (7.24.2.11).

 

187

Anchor
ub_187
ub_187

In a call to the wcstok function, the object pointed to by ptr does not have the value stored by the previous call for the same wide string (7.24.4.5.7).

 

188

Anchor
ub_188
ub_188

An mbstate_t object is used inappropriately (7.24.6).

 

189

Anchor
ub_189
ub_189

The value of an argument of type wint_t to a wide character classification or case mapping function is neither equal to the value of WEOF nor representable as a wchar_t (7.25.1).

 

190

Anchor
ub_190
ub_190

The iswctype function is called using a different LC_CTYPE category from the one in effect for the call to the wctype function that returned the description (7.25.2.2.1).

 

191

Anchor
ub_191
ub_191

The towctrans function is called using a different LC_CTYPE category from the one in effect for the call to the wctrans function that returned the description (7.25.3.2.1).