SEI CERT C Coding Standard

Space shortcuts

Page tree

Versions Compared

Old Version 91

changes.mady.by.user Amy Gale

Saved on

compared with

New Version 92

changes.mady.by.user Jill Britton

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Tool

Version

Checker

Description

CodeSonar
Include Page
CodeSonar_V
CodeSonar_V
MISC.NEGCHARNegative Character Value

Compass/ROSE

 

 

Can detect violations of this recommendation. In particular, it notes uses of the scanf() family of functions where on the type specifier is a floating-point or integer type

Fortify SCA

5.0

 

Can detect violations of this recommendation with the CERT C Rule Pack

PRQA QA-C
Include Page
PRQA QA-C_Vv
PRQA QA-C_Vv
Warncall for scanf etcFully implemented

...

Related Guidelines

CERT C++ Secure Coding StandardINT05-CPP. Do not use input functions to convert character data if they cannot handle all possible inputs
MITRE CWECWE-192, Integer coercion error
CWE-197, Numeric truncation error

...