...
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| IO.INJ.COMMAND | Command injection | ||||||
| Coverity | 6.5 | TAINTED_STRING | Fully implemented | ||||||
| Klocwork |
|
| |||||||
| LDRA tool suite |
| 108 D, 109 D | Partially implemented | ||||||
| Parasoft C/C++test | 9.5 | BD-SECURITY-{TDCMD,TDFNAMES,TDSQL} | |||||||
| Polyspace Bug Finder | R2016a | Execution of externally controlled command | Command argument from an unsecure source vulnerable to operating system command injection Path argument from an unsecure source Using a library argument from an externally controlled path |
...