...
MEM06-A. Do not use user-defined functions as parameters to allocation routines
MEM07-A. Ensure that size arguments to calloc() do not result in an integer overflow
Rules
MEM30-C. Do not access freed memory
...
MEM35-C. Allocate sufficient memory for an object
MEM07MEM37-A. Ensure that size arguments to calloc() do not result in an integer overflowC. Reserved
MEM38-C. Use Flexible Array Members for dynamically sized structures
...