Page History

LANG.MEM.BO

LANG.MEM.TO

MISC.MEM.NTERM

BADFUNC.BO.*

Buffer Overrun

Type Overrun

No Space For Null Terminator

A collection of warning classes that report uses of library functions prone to internal buffer overflows.

Compass/ROSE

Can detect violations of the rule. However, it is unable to handle cases involving strcpy_s() or manual string copies such as the one in the first example

STRING_OVERFLOW

STRING_SIZE

SECURE_CODING

Fully Implemented

Fully implemented

Fully implemented

Fortify SCA

5.0

Klocwork

NNTS.TAINTED
SV.STRBO.GETS
SV.USAGERULES.UNBOUNDED_STRING_COPY

LDRA tool suite

Splint

STR03-C. Do not inadvertently truncate a string
STR07-C. Use the bounds-checking interfaces for remediation of existing string manipulation code
MSC24-C. Do not use deprecated or obsolescent functions
MEM00-C. Allocate and free memory in the same module, at the same level of abstraction
FIO34-C. Distinguish between characters read from a file and EOF or WEOF

Using a tainted value to write to an object using a formatted input or output function [taintformatio]
Tainted strings are passed to a string copying function [taintstrcpy]