SEI CERT C Coding Standard

Space shortcuts

Page tree

Versions Compared

Old Version 56

changes.mady.by.user Melanie Thompson

Saved on

compared with

New Version 57

changes.mady.by.user Melanie Thompson

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

MSC01-C

medium

probable

medium

P8

L2

Automated Detection

The LDRA tool suite Version 7.6.0 can detect violations of this recommendation.

...

Tool

Version

Checker

Description

Section

LDRA tool suite

Include Page
c:LDRA_V
c:LDRA_V

 

 

Section

GCC

Include Page
c:GCC_V
c:GCC_V

 

Section

can detect some violations of this recommendation when the -Wswitch and -Wswitch-default flags are used

...

Section

Compass/ROSE

 

 

Section

can detect some violations of this recommendation. In particular it flags switch statements that do not have a default clause. ROSE should also detect "fake switches" as well...that is, a chain of if statements each checking the value of the same variable. These if statements should always end in an "else" clause, or they should mathematically cover every possibility. For instance, consider the following:

Code Block
bgColor#ccccff

  if (x > 0) {
	  /* ... */
  } else if (x < 0) {
    /* ... */
  } else if (x == 0) {
    /* ... */
  }

...

 Section
Klocwork
 Include Page
c:Klocwork_V
c:Klocwork_V
 Section
LA_UNUSED
 
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...
Bibliography
 Wiki Markup
\[[Hatton 951995|AA. Bibliography#Hatton 95]\] Section 2.7.2, "Errors of omission and addition"
\[[ISO/IEC PDTR 24772|AA. Bibliography#ISO/IEC PDTR 24772]\] "CLL Switch statements and static analysis"
\[[Viega 052005|AA. Bibliography#Viega 05]\] Section 5.2.17, "Failure to account for default case in switch"
\[[http://www.aeroxp.org/2009/01/lesson-on-infinite-loops]\] for analysis on the Zune 30 bug
...