Page History

Could detect the specific noncompliant code example. It could identify when the result of a % operation might be negative and flag usage of that result in an array index. It could conceivably flag usage of any such result without first checking that the result is positive, but it would likely introduce many false positives

584 S

Fully implemented

CERT_C-

INT10-

a

Avoid accessing arrays out of bounds

Remainder % operands are from an unsecure source