...
In this noncompliant code example, the function f()
is called from within a multithreaded application but encounters an error while calling a system function. The strerror()
function returns a human-readable error string given an error number.
The C Standard, 7.2426.6.2 3 paragraph 3 [ISO/IEC 9899:20112024], specifically states that strerror()
is not required to avoid data races.
The strerror function is not required to avoid data races with other calls to the strerror function.
An implementation could write the error string into a static array and return a pointer to it, and that array might be accessible and modifiable by other threads.
...
This code first sets errno
to 0 to comply with ERR30-C. Set errno to zero before calling a library function known to set errno, and check errno only after the function returns a value indicating failureTake care when reading errno.
Compliant Solution (Annex K, strerror_s()
)
...
Tool | Version | Checker | Description | ||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Astrée |
| Supported, but no explicit checker | |||||||||||||||||
CodeSonar |
| BADFUNC.RANDOM.RAND | Use of | ||||||||||||||||
Compass/ROSE | A module written in Compass/ROSE can detect violations of this rule | ||||||||||||||||||
Cppcheck Premium |
| premium-cert-con33-c | Fully implemented | ||||||||||||||||
Helix QAC |
| C5037 C++5021 DF4976, DF4977 | |||||||||||||||||
Klocwork |
| CERT.CONC.LIB_FUNC_USE | |||||||||||||||||
LDRA tool suite |
| 44 S | Partially Implemented | ||||||||||||||||
Parasoft C/C++test |
| CERT_C-CON33-a | Avoid using thread-unsafe functions | ||||||||||||||||
PC-lint Plus |
| 586 | Fully supported | ||||||||||||||||
| CERT C: Rule CON33-C | Checks for data race through standard library function call (rule fully covered) | PRQA QA-C | ||||||||||||||||
Include Page | PRQA QA-C_v | PRQA QA-C_v5037, 4976, 4977 | PRQA QA-C++ | ||||||||||||||||
Include Page | cplusplus:PRQA QA-C++_V | cplusplus:PRQA QA-C++_V | 4976, 4977, 5021 |
Related Guidelines
Key here (explains table format and definitions)
...
[IEEE Std 1003.1:2013] | Section 2.9.1, "Thread Safety" |
[ISO/IEC 9899:20112024] | Subclause 7.2426.6.23, "The |
[Open Group 1997b] | Section 10.12, "Thread-Safe POSIX.1 and C-Language Functions" |
...