eThe The readlink() function reads where a link points to. It makes no effort to null-terminate its second argument, buffer. Instead, it just returns the number of characters it has written.
...
Tool | Version | Checker | Description | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| Supported: Can be checked with appropriate analysis stubs. | ||||||||||||||||
| Axivion Bauhaus Suite |
| CertC-POS30 | ||||||||||||||||
| CodeSonar |
| LANG.MEM.BO | Buffer Overrun | |||||||||||||||
| Compass/ROSE | ||||||||||||||||||
| Coverity |
| READLINK | Implemented | |||||||||||||||
| Helix QAC |
| C5033 | ||||||||||||||||
| Klocwork |
| ABV.GENERAL | ||||||||||||||||
| Parasoft C/C++test |
| CERT_C-POS30-a | Avoid overflow due to reading a not zero terminated string | |||||||||||||||
| CERT C: Rule POS30-C | Checks for misuse of readlink() (rule partially covered) | PRQA QA-C | |||||||||||||||
| Include Page | PRQA QA-C_v | PRQA QA-C_v | 5033 | Helix QAC | ||||||||||||||
| Include Page | Helix QAC_V | Helix QAC_V
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...