...
Section 7.21.7.2 of the C standard Standard [ISO/IEC 9899:2011] says,
...
Tool | Version | Checker | Description | Fortify SCA | V. 5.0
|
| |
|---|---|---|---|---|---|---|---|
| Compass/ROSE |
|
| Could detect some violations of this rule. In particular, it could detect the noncompliant code example by searching for | "
| ", which could be −1. The crux of this rule is that a string returned by | ||
Fortify SCA | 5.0 |
|
|
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
Related Guidelines
...
ISO/IEC 9899:2011 Section 7.21.7.2, "The fgets function"
...
...
| Failure to constrain operations within the bounds of an allocated memory buffer |
...
...
...
| Failure to handle wrong data type |
...
Bibliography
| [ISO/IEC 9899:2011] | Section 7.21.7.2, "The fgets Function" |
| [Lai 2006] | |
| [Seacord 2005a] | Chapter 2, "Strings" |