SEI CERT C Coding Standard

Space shortcuts

Page tree

Versions Compared

Old Version 57

changes.mady.by.user Amy Gale

Saved on

compared with

New Version 58

changes.mady.by.user Jill Britton

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Tool

Version

Checker

Description

CodeSonar
Include Page
CodeSonar_V
CodeSonar_V

LANG.FUNCS.IRV

Ignored Return Value

Compass/ROSE

  

Can detect violations of this recommendation when checking for violations of EXP12-C. Do not ignore values returned by functions and EXP34-C. Do not dereference null pointers

Coverity

Include Page
Coverity_V
Coverity_V

CHECKED_RETURN

Finds inconsistencies in how function call return values are handled. Coverity Prevent cannot discover all violations of this recommendation, so further verification is necessary

Fortify SCA

5.0

 

 

LDRA tool suite

Include Page
LDRA_V
LDRA_V

80 D

Partially implemented
PRQA QA-C
Include Page
PRQA QA-C_Vv
PRQA QA-C_Vv

3200

Partially implemented

...

CERT C Secure Coding Standard

ERR00-C. Adopt and implement a consistent and comprehensive error-handling policy
EXP34-C. Do not dereference null pointers
FIO13-C. Never push back anything other than one read character
MEM04-C. Do not perform zero-length allocations
MEM12-C. Consider using a goto chain when leaving a function on error when using and releasing resources

CERT C++ Secure Coding StandardERR10-CPP. Check for error conditions
FIO04-CPP. Detect and handle input and output errors
ISO/IEC TS 17961:2013Failing to detect and handle standard library errors [liberr]
MITRE CWECWE-252, Unchecked Return Value
CWE-253, Incorrect Check of Function Return Value
CWE-390, Detection of Error Condition without Action
CWE-391, Unchecked Error Condition

...