The variable parameters of a variadic function, that is, those that correspond with the position of the ellipsis, are interpreted by the va_arg()
macro. The va_arg()
macro is used to extract the next argument from an initialized argument list within the body of a variadic function implementation. The size of each parameter is determined by the specified type. If the type is inconsistent with the corresponding argument, the behavior is undefined and may result in misinterpreted data or an alignment error. (See EXP36-C. Do not convert pointers into more strictly aligned pointer types.)
...
Tool | Version | Checker | Description | ||||||
---|---|---|---|---|---|---|---|---|---|
GCC |
|
| Warns about inconsistently typed arguments to formatted output functions when the | ||||||
Compass/ROSE |
|
| Does NOT currently detect violations of this recommendation. While the recommendation in general cannot be automated, due to the difficulty in enforcing contracts between a variadic function and its invokers, it would be fairly easy to enforce type correctness on arguments to the | ||||||
| 41 S | Partially implemented. | |||||||
PRQA QA-C |
| 0179 (U) 0184 (U) 0185(U) 0186 (U) 0190 (U) 0191 (U) 0192 (U) 0193 (U) 0194 (U) 0195 (U) 0196 (U) 0197 (U) 0198 (U) 0199 (U) 0200 (U) 0201 (U) 0206 (U) | Partially implemented |
Related Vulnerabilities
...
ISO/IEC 9899:2011 Section 6.5.2.2, "Function calls," and section 7.16, "Variable arguments"
ISO/IEC TR 24772 "IHN Type system" and "OTR Subprogram signature mismatch"
MISRA Rule 16.1
...