...
Tool | Version | Checker | Description | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| IO.TAINT.SIZE MISC.MEM.SIZE.BAD | Tainted Allocation Size Unreasonable Size Argument | |||||||||||||
| STACK_USE | Can help detect single stack allocations that are dangerously large, although it will not detect excessive stack use resulting from recursion | ||||||||||||||
| Helix QAC |
| C1051, C1520, C3670 | ||||||||||||||
| Klocwork |
| MISRA.FUNC.RECUR | ||||||||||||||
| LDRA tool suite |
| 44 S | Enhanced Enforcement | |||||||||||||
| Parasoft C/C++test |
| CERT_C-MEM05-a | Do not use recursion | |||||||||||||
| PC-lint Plus |
| 9035, 9070 | Partially supported: reports use of variable length arrays and recursion | |||||||||||||
| Polyspace Bug Finder |
| Checks for:
| Size of the variable-length array (VLA) is from an unsecure source and may be zero, negative, or too large Size of variable-length array is zero or negative Functions shall not call themselves, either directly or indirectly | PRQA QA-C | ||||||||||||
| Include Page | PRQA QA-C_v | PRQA QA-C_v | 1051, 1520, 2052, 3670 |
Rec. partially covered. Partially implemented | ||||||||||||
| PVS-Studio |
| V505 |
Related Vulnerabilities
Stack overflow has been implicated in Toyota unintended acceleration cases, where Camry and other Toyota vehicles accelerated unexpectedly. Michael Barr testified at the trial that a stack overflow could corrupt the critical variables of the operating system, because they were located in memory adjacent to the top of the stack [Samek 2014].
...