SEI CERT C Coding Standard

Space shortcuts

Page tree

Versions Compared

Old Version 90

changes.mady.by.user Justin Pincar

Saved on

compared with

New Version 91

changes.mady.by.user Robert Seacord (Manager)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Automated Detection

GCC

Tool

Compliance

Description

n/a ROSE

Rose

partial

LDRA

yes

Fortify

yes

Coverity

RETURN_LOCAL

Splint

yes

Klocwork

LOCRET

The LDRA tool suite Version 7.6.0 can detect violations of this rule.

...

Splint Version 3.1.1 can detect violations of this rule.

Compass/ROSE can detect violations of this rule. It automatically detects returning pointers to local variables. Detecting more general cases, such as examples where static pointers are set to local variables which then go out of scope would be difficult

...

.

LDRA tool suite V. 7.6.0

yes

 

Fortify SCA V. 5.0

yes

Can detect violations when an array is declared in a function and then a pointer to that array is returned.

Coverity Prevent

yes

The RETURN_LOCAL checker finds many instances where a function will return a pointer to a local stack variable

...

.

Splint V. 3.1.1

yes

 

Klocwork V.

...

8.0.4.16

...

yes

Can detect violations of this rule with the LOCRET checker.

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

Cross References

Standard

Document

Cert C

n/a

Cert C CERT C++

DCL30-CPP. Declare objects with appropriate storage durations

Cert Java

n/a

MISRA

Rule 8.6

CWE

n/a

Bibliography

Wiki Markup
\[[Coverity 07|AA. C References#Coverity 07]\]
\[[ISO/IEC 9899:1999|AA. C References#ISO/IEC 9899-1999]\] Section 6.2.4, "Storage durations of objects," and Section 7.20.3, "Memory management functions"
\[[ISO/IEC PDTR 24772|AA. C References#ISO/IEC PDTR 24772]\] "DCM Dangling references to stack frames"
\[[MISRA 04|AA. C References#MISRA 04]\] Rule 8.6

...