Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

MEM05-A. Avoid large stack allocations

MEM06-A. Do not use user-defined functions as parameters to allocation routines

Rules

MEM30-C. Do not access freed memory

...

MEM35-C. Ensure that size arguments to memory allocation functions are correctMEM36-C. Reserved

MEM37-C. Ensure that size arguments to calloc() do not result in an integer overflow

...

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

MEM00-A

3 (high)

2 (probable)

1 (high)

P6

L2

MEM01-A

3 (high)

2 (probable)

3 (low)

P18

L1

MEM02-A

1 (low)

1 (unlikely)

3 (low)

P3

L3

MEM03-A

2 (medium)

1 (unlikely)

3 (low)

P6

L2

MEM04-A

3 (high)

2 (probable)

2 (medium)

P12

L1

MEM05-A

1 (low)

1 (unlikely)

2 (medium)

P2

L3

MEM06-A

3 (high)

2 (probable)

2 (medium)

P12

L1

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

MEM30-C

3 (high)

3 (likely)

2 (medium)

P18

L1

MEM31-C

3 (high)

2 (probable)

1 (high)

P6

L2

MEM32-C

1 (high)

3 (likely)

2 (high)

P6

L1

MEM33-C

2 (medium)

1 (unlikely)

3 (low)

P6

L2

MEM34-C

1 (high)

3 (likely)

2 (high)

P6

L1

MEM35-C

3 (high)

2 (probable)

1 (high)

P6

L2

MEM36-C

TBD

TBD

TBD

TBD

TBD

MEM37-C

3 (high)

1 (low)

1 (high)

P12

L1

MEM38-C

1 (low)

1 (unlikely)

3 (low)

P3

L3

...