...
Alternatively, input character data as a null-terminated byte string and convert to an integer value using strtol() or a related function. (See INT06ERR34-C. Use strtol() or a related function to convert a string token to an integerDetect errors when converting a string to a number.)
Noncompliant Code Example
...
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| MISC.NEGCHAR | Negative Character Value | ||||||
|
| Can detect violations of this recommendation. In particular, it notes uses of the | |||||||
5.0 |
| Can detect violations of this recommendation with the CERT C Rule Pack | |||||||
| LDRA tool suite |
| 44 S | Enhanced Enforcement | ||||||
| Parasoft C/C++test | 9.5 | SECURITY-13 | Fully implemented | ||||||
| PRQA QA-C |
| Warncall for scanf etc | Fully implemented |
...