...
In the second strcat_nc()
call, the compiler compiles the code with no warnings, but the resulting code will attempt to modify the "str1"
literal. This violates guidelines recommendation STR05-C. Use pointers to const when referring to string literals and rule STR30-C. Do not attempt to modify string literals.
...
Not declaring an unchanging value const
prohibits the function from working with values already cast as const
. This problem can be sidestepped by type casting away the const
, but doing so violates guideline recommendation EXP05-C. Do not cast away a const qualification.
...
Tool | Version | Checker | Description | ||||
---|---|---|---|---|---|---|---|
|
|
|
|
...
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
Related Guidelines
CERT C++ Secure Coding Standard: DCL13-CPP. Declare function parameters that are pointers to values not changed by the function as const
Bibliography
\[[ISO/IEC 9899:1999 Wiki Markup
|AA. Bibliography#ISO/IEC 9899-1999]\] \[[ISO/IEC PDTR 24772|AA. Bibliography#ISO/IEC PDTR 24772]\] TR 24772 "CSJ Passing parameters and return values"
Bibliography
...