...
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Clang |
| cert-env33-c | Checked by clang-tidy | ||||||
| CodeSonar |
| BADFUNC.PATH.SYSTEM | Use of system | ||||||
| Compass/ROSE | |||||||||
| SV.CODE_INJECTION.SHELL_EXEC | ||||||||
| 588 S | Fully implemented | |||||||
| Parasoft C/C++test | 9.5 | MISRA2012-RULE-21_8 | Also detects getenv(), abort(), and exit() | ||||||
| Polyspace Bug Finder | R2016a | Execution of externally controlled command, Command executed from externally controlled path | Command argument from an unsecure source vulnerable to operating system command injection Path argument from an unsecure source | ||||||
| PRQA QA-C |
| Warncall -wc system | Partially implemented | ||||||
| SonarQube C/C++ Plugin |
| S990 | Detects uses of "abort", "exit", "getenv" and "system" from <stdlib.h> |
...