Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

INT10-C

lowLow

unlikelyUnlikely

highHigh

P1

L3

Automated Detection

Tool

Version

Checker

Description

Compass/ROSE

 

 

Could detect the specific noncompliant code example. It could identify when the result of a % operation might be negative and flag usage of that result in an array index. It could conceivably flag usage of any such result without first checking that the result is positive, but it would likely introduce many false positives

Fortify SCA

5.0

 

Can detect violations of this recommendation with the CERT C Rule Pack

LDRA tool suite

Include Page
LDRA_V
LDRA_V

584 S

Fully implemented

PRQA QA-C
Include Page
PRQA_V
PRQA_V
3103Fully implemented

...