Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Making code reverse compatible to fit this standard sometimes breaks functionality but this is a good recommendation to follow on new code code

Risk Assessment

Modifying string literals can lead to abnormal program termination and results in undefined behavior that can be used in denial-of-service attacks.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

STR30-C

1 (low)

3 (likely)

3 (low)

P9

L2

Examples of vulnerabilities resulting from the violation of this rule can be found on the CERT website.

References:

http://www.open-std.org/jtc1/sc22/wg21/docs/papers/1993/N0389.asc;

...