...
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Klocwork |
| PORTING.STORAGE.STRUCT PORTING.STRUCT.BOOL | |||||||
| Parasoft C/C++test |
| SECURITY-46 | Implemented | ||||||
| R2018a | Information leak via structure padding | Padding bytes can contain sensitive information |
Related Vulnerabilities
Numerous vulnerabilities in the Linux Kernel have resulted from violations of this rule. CVE-2010-4083 describes a vulnerability in which the semctl() system call allows unprivileged users to read uninitialized kernel stack memory because various fields of a semid_ds struct declared on the stack are not altered or zeroed before being copied back to the user.
...