The C Standard, 6.7.3.2.1, paragraph 18 20 [ISO/IEC 9899:20112024], says
As a special case, the last element of a structure with more than one named member may have an incomplete array type; this is called a flexible array member. In most situations, the flexible array member is ignored. In particular, the size of the structure is as if the flexible array member were omitted except that it may have more trailing padding than the omission would imply.
...
Tool | Version | Checker | Description | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| flexible-array-member-assignment flexible-array-member-declaration | Fully checked | |||||||||||
| Axivion Bauhaus Suite |
| CertC-MEM33 | Fully implemented | |||||||||||
| CodeSonar |
| LANG.STRUCT.DECL.FAM | Declaration of Flexible Array Member | |||||||||||
| Compass/ROSE | Can detect all of these | |||||||||||||
| Cppcheck Premium |
| premium-cert-mem33-c | Partially implemented | |||||||||||
| Helix QAC |
| C1061, C1062, C1063, C1064 | ||||||||||||
| Klocwork |
| MISRA.INCOMPLETE.STRUCT | ||||||||||||
| LDRA tool suite |
| 649 S, 650 S | Fully implemented | |||||||||||
| Parasoft C/C++test |
| CERT_C-MEM33-a | Allocate structures containing a flexible array member dynamically | |||||||||||
| CERT C: Rule MEM33-C | Checks for misuse of structure with flexible array member (rule fully covered) | PRQA QA-C||||||||||||
| Include Page | PRQA QA-C_v | PRQA QA-C_v | 1061, 1062, 1063, 1064 | |||||||||||
| RuleChecker |
| flexible-array-member-assignment flexible-array-member-declaration | Fully checked |
...
Bibliography
| [ISO/IEC 9899:20112024] | Subclause 6.7.3.2.1, "Structure and Union Specifiers" |
| [JTC1/SC22/WG14 N791] | Solving the Struct Hack Problem |
...