Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

MEM03-A. Clear sensitive information stored in dynamic memory prior to deallocation

MEM04-A. Do not make assumptions about the result of allocating 0 bytes

Rules

MEM30-C. Do not access freed memory

...

MEM35-C. Ensure that size arguments to memory allocation functions are correct

MEM36-C. Do not make assumptions about the result of allocating 0 bytes

MEM37-C. Ensure that size arguments to calloc() do not result in an integer overflow

...

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

MEM00-A

3 (high)

2 (probable)

1 (high)

P6

L2

MEM01-A

3 (high)

2 (probable)

3 (low)

P18

L1

MEM02-A

1 (low)

1 (unlikely)

3 (low)

P3

L3

MEM03-A

2 (medium)

1 (unlikely)

3 (low)

P6

L2

MEM04-A

3 (high)

2 (probable)

2 (medium)

P12

L1

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

MEM30-C

3 (high)

3 (likely)

2 (medium)

P18

L1

MEM31-C

3 (high)

2 (probable)

1 (high)

P6

L2

MEM32-C

1 (high)

3 (likely)

2 (high)

P6

L1

MEM33-C

2 (medium)

1 (unlikely)

3 (low)

P6

L2

MEM34-C

1 (high)

3 (likely)

2 (high)

P6

L1

MEM35-C

3 (high)

2 (probable)

1 (high)

P6

L2

MEM36-C

3 (high)

2 (probable)

2 (medium)

P12

L1

MEM37-C

3 (high)

1 (low)

1 (high)

P12

L1

MEM38-C

2 (medium)

2 (probable)

3 (low)

P12

L1

...