Page History

...

`fgets()`	`fgetws()`	`mbstowcs()`¹	`wcstombs()`¹
`mbrtoc16()`²	`mbrtoc32()`²	`mbsrtowcs()`¹	`wcsrtombs()`¹
`mbtowc()`²	`mbrtowc()`¹²	`mblen()`	`mbrlen()`
`memchr()`	`wmemchr()`	`memset()`	`wmemset()`
`strftime()`	`wcsftime()`	`strxfrm()¹`	`wcsxfrm()¹`
`strncat()²`	`wcsncat()²`	`snprintf()`	`vsnprintf()`
`swprintf()`	`vswprintf()`	`setvbuf()`	`tmpnam_s()`
`snprintf_s()`	`sprintf_s()`	`vsnprintf_s()`	`vsprintf_s()`
`gets_s()`	`getenv_s()`	`wctomb_s()`	`mbstowcs_s()³`
`wcstombs_s()³`	`memcpy_s()³`	`memmove_s()³`	`strncpy_s()³`
`strncat_s()³`	`strtok_s()²`	`strerror_s()`	`strnlen_s()`
`asctime_s()`	`ctime_s()`	`snwprintf_s()`	`swprintf_s()`
`vsnwprintf_s()`	`vswprintf_s()`	`wcsncpy_s()³`	`wmemcpy_s()³`
`wmemmove_s()³`	`wcsncat_s()³`	`wcstok_s()²`	`wcsnlen_s()`
`wcrtomb_s()`	`mbsrtowcs_s()³`	`wcsrtombs_s()³`	`memset_s()⁴`

...

Tool

Version

Checker

Description

Astrée

Include Page

	Astrée_V
	Astrée_V

array_out_of_bounds

Supported

Astrée reports all out-of-bound accesses within library analysis stubs. The user may provide additional stubs for arbitrary (library) functions.

CodeSonar

Include Page

	CodeSonar_V
	CodeSonar_V

LANG.MEM.BO
LANG.MEM.BU
BADFUNC.BO.*

Buffer overrun
Buffer underrun
A collection of warning classes that report uses of library functions prone to internal buffer overflows

Compass/ROSE

Coverity

Include Page

	Coverity_V
	Coverity_V

BUFFER_SIZE

BAD_SIZEOF

BAD_ALLOC_STRLEN

BAD_ALLOC_ARITHMETIC

Implemented

Fortify SCA

5.0

Can detect violations of this rule with CERT C Rule Pack

Helix QAC

Include Page

	Helix QAC_V
	Helix QAC_V

C2840

DF2840, DF2841, DF2842, DF2843, DF2845, DF2846, DF2847, DF2848, DF2935, DF2936, DF2937, DF2938, DF4880, DF4881, DF4882, DF4883

Klocwork

Include Page

	Klocwork_V
	Klocwork_V

ABV.ANY_SIZE_ARRAYGENERAL
ABV.GENERAL
ABV.ITERATOR
ABV.STACK
ABV.TAINTED
ABV.UNKNOWN_SIZEMULTIDIMENSION

LDRA tool suite

Include Page

	LDRA_V
	LDRA_V

64 X, 66 X, 68 X, 69 X, 70 X, 71 X, 79 X

Partially Implmented

Parasoft C/C++test

Include Page

	Parasoft_V
	Parasoft_V

CERT_C-ARR38-a
CERT_C-ARR38-b
CERT_C-ARR38-c
CERT_C-ARR38-d

Avoid overflow when reading from a buffer
Avoid overflow when writing to a buffer
Avoid buffer overflow due to defining incorrect format limits
Avoid overflow due to reading a not zero terminated string

Parasoft Insure++

Runtime analysisPolyspace Bug Finder

PC-lint Plus

Include Page