...
| Wiki Markup |
|---|
The {{strlen()}} function computes the length of a string by determining the number of characters that precede the terminating nullNULL character. A problem occurs if the first character read from the input by {{fgets()}} is a nullNULL character. This may occur, for example, if a binary data file is read by the {{fgets()}} call \[[Lai 06|AA. C References#Lai 06]\]. If the first character in {{buf}} is a nullNULL character, {{strlen(buf)}} will return 0 and a write-outside-array-bounds error will occur. |
...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
FIO37-C | 3 ( high ) | 1 ( unlikely ) | 2 ( medium ) | P6 | L2 |
Automated Detection
Fortify SCA Version 5.0 is able to detect violations of this rule.
...