...
Non-Compliant Code Example
| Wiki Markup |
|---|
C99 includes support for variable-length arrays (VLAs) \[[ISO/IEC 9899-1999|AA. C References#ISO/IEC 9899-1999]\] includes support for variable-length arrays (VLAs). If the array length is derived from an untrusted data source, an attacker could cause the process to perform an excessive allocation on the stack. |
...