Page Information

Title:	FIO30-C. Exclude user input from format strings
Author:	Hal Burch	Jun 16, 2006
Last Changed by:	Swasti Shrivastava	Dec 12, 2024
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/RdYxBQ
Export As:	Word · PDF

Android (1)     Page: Applicable in Principle to Android (C Rules/Recomendations)

SEI CERT C Coding Standard (3)     Page: FIO47-C. Use valid format strings     Page: EXP43-C. Avoid undefined behavior when using restrict-qualified pointers     Page: MSC09-C. Character encoding: Use subset of ASCII for safety

SEI CERT Oracle Coding Standard for Java (1)     Page: IDS06-J. Exclude unsanitized user input from format strings

SEI CERT Perl Coding Standard (1)     Page: IDS30-PL. Exclude user input from format strings

Parent Page     Page: Rule 09. Input Output (FIO)

• char-strings
• gcc
• fortify
• compass/rose
• splint
• nptc
• sample
• fio
• rose-complete
• input
• posix
• rule
• cwe-134
• klocwork
• nptc-aliasing
• in-cpp

Time	Editor
Dec 12, 2024 01:22	Swasti Shrivastava	View Changes
Sep 19, 2024 13:03	Swasti Shrivastava	View Changes
Sep 19, 2024 12:58	Swasti Shrivastava	View Changes
Apr 20, 2023 05:24	Jill Britton	View Changes
Jan 18, 2023 11:54	Jill Britton

External Links (17)
    https://wiki.sei.cmu.edu/confluence/display/c/Cppcheck+Prem…
    https://wiki.sei.cmu.edu/confluence/display/perl/SEI+CERT+P…
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://wiki.sei.cmu.edu/confluence/display/c/How+this+Codi…
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/PVS-Studio
    https://wiki.sei.cmu.edu/confluence/display/java/SEI+CERT+O…
    https://cwe.mitre.org/data/definitions/20.html
    https://wiki.sei.cmu.edu/confluence/display/java/IDS06-J.+E…
    https://pvs-studio.com/en/docs/warnings/v618/
    cwe.mitre.org/data/definitions/134.html
    https://www.mathworks.com/help/bugfinder/ref/certcrulefio30…
    https://wiki.sei.cmu.edu/confluence/display/perl/IDS30-PL.+…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://cwe.mitre.org/data/index.html

SEI CERT C Coding Standard (30)     Page: PC-lint Plus_V     Page: Helix QAC     Page: CodeSonar     Page: Helix QAC_V     Page: GCC     Page: Polyspace Bug Finder_V     Page: Parasoft_V     Page: PC-lint Plus     Page: Polyspace Bug Finder     Page: AA. Bibliography     Page: Axivion Bauhaus Suite     Page: Klocwork_V     Page: BB. Definitions     Page: Astrée_V     Page: Cppcheck Premium_V     Page: CodeSonar_V     Page: Splint     Home page: SEI CERT C Coding Standard     Page: Axivion Bauhaus Suite_V     Page: GCC_V     Page: LDRA     Page: PVS-Studio_V     Page: LDRA_V     Page: Astrée     Page: Klocwork     Page: Rose     Page: Coverity_V     Page: Splint_V     Page: Coverity     Page: Parasoft