...
Some compilers generate a warning when a pointer to an automatic variable is returned from a function, as in this example. Compile your code at high warning levels and resolve any warnings (see MSC00-CCPP. Compile cleanly at high warning levels).
...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
DCL30-C CPP | high | probable | high | P6 | L2 |
Automated Detection
...
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
Other Languages
This rule appears in the C Secure Coding Standard as DCL30-C. Declare objects with appropriate storage durations.
...
| Wiki Markup |
|---|
\[[Coverity 07|AA. C++ References#Coverity 07]\] \[[ISO/IEC 9899:1999|AA. C++ References#ISO/IEC 9899-1999]\] Section 6.2.4, "Storage durations of objects," and Section 7.20.3, "Memory management functions" \[[ISO/IEC PDTR 24772|AA. C++ References#ISO/IEC PDTR 24772]\] "DCM Dangling references to stack frames" \[[MISRA 04|AA. C++ References#MISRA 04]\] Rule 8.6 |
...
DCL15-CCPP. Declare objects that do not need external linkage with the storage-class specifier static 02. Declarations and Initialization (DCL) DCL31-CCPP. Declare identifiers before using them