...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
POS30-C | high | probable | medium | P12 | L1 |
Automated Detection
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| Supported: Can be checked with appropriate analysis stubs. | |||||||
| Axivion Bauhaus Suite |
| CertC-POS30 | |||||||
| CodeSonar |
| LANG.MEM.BO | Buffer Overrun | ||||||
| Compass/ROSE | |||||||||
| Coverity |
| READLINK | Implemented | ||||||
| Helix QAC |
| C5033 | |||||||
| Klocwork |
| ABV.GENERAL | |||||||
| Parasoft C/C++test |
|
CERT_C-POS30-a | Avoid overflow due to reading a not zero terminated string | ||||
|
|
| CERT C: Rule POS30-C | Checks for misuse |
| of readlink( |
| ) (rule partially covered) |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...
...