The C Language facilties setjmp() and longjmp() can be used to simulate the throwing of exceptions, but they are very low-level facilities and using them can bypass proper resource management and the proper calling of destructors.
Non-Compliant Code Example
Compliant Solution
Priority: P4 Level: L3
Using setjmp() and longjmp() could lead to a denial-of-service attack.
Component | Value |
|---|---|
Severity | 1 (low) |
Likelihood | 2 (probable) |
Remediation cost | 2 (medium) |
References
- Henricson 97 Rule 13.3 Do not use
setjmp()andlongjmp().