...
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| signal-handler-unsafe-call | Partially checked | ||||||
| Axivion Bauhaus Suite |
| CertC-SIG30 | |||||||
| Compass/ROSE | Can detect violations of the rule for single-file programs | ||||||||
| LDRA tool suite |
| 88 D, 89 D | Partially implemented | ||||||
| Parasoft C/C++test |
| CERT_C-SIG30-a | Properly define signal handlers | ||||||
| PC-lint Plus |
| 2670, 2761 | Fully supported | ||||||
| Checks for function called from signal handler not asynchronous-safe (rule fully covered) | ||||||||
| PRQA QA-C |
| 2028, 2030 | |||||||
| RuleChecker |
| signal-handler-unsafe-call | Partially checked | ||||||
| Splint |
| ||||||||
| Helix QAC |
|
Related Vulnerabilities
For an overview of software vulnerabilities resulting from improper signal handling, see Michal Zalewski's paper "Delivering Signals for Fun and Profit" [Zalewski 2001].
...