...
Incorrectly using a variadic function can result in abnormal program termination, unintended information disclosure, or execution of arbitrary code.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
DCL50-CPP | High | Probable | Medium | P12 | L1 |
Automated Detection
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Axivion Bauhaus Suite |
| CertC++-DCL51 | |||||||
| Clang |
| cert-dcl50-cpp | Checked by clang-tidy. | ||||||
| LDRA tool suite |
| 41 S | Fully Implemented | ||||||
| Parasoft C/C++test |
|
|
| MISRA2004-16_1 |
| PRQA QA-C++ |
| 2012 |
| SonarQube C/C++ Plugin |
| FunctionEllipsis |
Related Vulnerabilities
Search for other vulnerabilities resulting from the violation of this rule on the CERT website.
Bibliography
...