Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Tool

Version

Checker

Description

Axivion Bauhaus Suite

Include Page
Axivion Bauhaus Suite_V
Axivion Bauhaus Suite_V

CertC-POS36
Compass/ROSE



Can detect some violations of this rule. In particular, it warns when calls to setgid() are immediately preceded by a call to setuid()

Helix QAC

Include Page
Helix QAC_V
Helix QAC_V

DF4891, DF4892, DF4893


Klocwork
Include Page
Klocwork_V
Klocwork_V
SV.FIU.PROCESS_VARIANTS

SV.USAGERULES.PERMISSIONS
SV.USAGERULES.PROCESS_VARIANTS


Parasoft C/C++test

Include Page
Parasoft_V
Parasoft_V

CERT_C-POS36-a

Observe correct revocation order while relinquishing privileges

Polyspace Bug Finder

Include Page
Polyspace Bug Finder_V
Polyspace Bug Finder_V

CERT C: Rule POS36-CChecks for bad Bad order of dropping privileges Dropped higher elevated privileges before dropping lower elevated privileges(rule fully covered)

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

...