Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Mistakes regarding precedence rules may cause an expression to be evaluated in an unintended way, which can lead to unexpected and abnormal program behavior.

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

EXP00-C

Low

Probable

Medium

P4

L3

Automated Detection

Tool

Version

Checker

Description

Axivion Bauhaus Suite

Include Page
Axivion Bauhaus Suite_V
Axivion Bauhaus Suite_V

CertC-EXP00Fully implemented
CodeSonar
Include Page
CodeSonar_V
CodeSonar_V

LANG.STRUCT.PARENS

Missing Parentheses

ECLAIR

Include Page
ECLAIR_V
ECLAIR_V

CC2.EXP00

Fully implemented

Helix QAC

Include Page
Helix QAC_V
Helix QAC_V

C3389, C3390, C3391, C3392, C3393, C3394, C3395, C3396, C3397, C3398, C3399, C3400


Klocwork
Include Page
Klocwork_V
Klocwork_V
MISRA
CERT.EXPR.PARENS
.2012 

LDRA tool suite
Include Page
LDRA_V
LDRA_V

361 S, 49 S

Fully implemented

Parasoft C/C++test
9.5CODSTA-97
Include Page
Parasoft_V
Parasoft_V

CERT_C-EXP00-a

Use parenthesis to clarify expression order if operators with precedence lower than arithmetic are used

PC-lint Plus

Include Page
PC-lint Plus_V
PC-lint Plus_V

9050

Fully supported

Polyspace Bug Finder

Include Page
Polyspace Bug Finder_V

Fully implemented

Polyspace Bug Finder

R2016a

_V

CERT C: Rec. EXP00-C


Checks for possible

Possibly

unintended evaluation of expression because of operator precedence rules

Operator precedence rules cause unexpected evaluation order in arithmetic expression

PRQA QA-C

(rec. fully covered)

PVS-Studio

Include Page

PRQA QA

PVS-

C

Studio_

v

V

PRQA QA

PVS-

C

Studio_

v

3389
3390
3391
3392
3393
3394
3395
3396
3397
3398
3399
3400

Fully implemented

V

V502, V593, V634, V648, V1104
SonarQube C/C++ Plugin
Include Page
SonarQube C/C++ Plugin_V
SonarQube C/C++ Plugin_V
S864

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

Related Guidelines

Bibliography

[Dowd 2006]Chapter 6, "C Language Issues" ("Precedence," pp. 287–288)
[Kernighan 1988]
 

[NASA-GB-1740.13]Section 6.4.3, "C Language"


 

...

Image Modified Image Modified Image Modified