...
Static analysis tools that perform taint analysis can diagnose some violations of this rule.
Other Languages
This rule appears in the C Secure Coding Standard as FIO30-C. Exclude user input from format strings.
This rule appears in the C++ Secure Coding Standard as FIO30-CPP. Exclude user input from format strings.
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="0b84102fd33e0fa7-3bdccd13-4fb6458a-9202a906-7bd23467b4a631dc156726a3"><ac:plain-text-body><![CDATA[ | [[MITRE 2009 | AA. Bibliography#MITRE 09]] | [CWE-134 | http://cwe.mitre.org/data/definitions/134.html] "Uncontrolled Format String" | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="320dad0b-6c99-4916-8b7a-386711ccce11"><ac:plain-text-body><![CDATA[ | [C Secure Coding Standard ] | [seccode:FIO30-C. Exclude user input from format strings]. | ]]></ac:plain-text-body></ac:structured-macro> | ||
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="b702b281-332d-4c33-9ac7-7165e60dbd7f"><ac:plain-text-body><![CDATA[ | [C++ Secure Coding Standard ] | [cplusplus:FIO30-CPP. Exclude user input from format strings]. | ]]></ac:plain-text-body></ac:structured-macro> |
Bibliography
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="e11713866a641637-b9308862-4ff0439d-864ba6d0-ffa64b7fa757363489364562"><ac:plain-text-body><![CDATA[ | [[API 2006 | AA. Bibliography#API 06]] | [Class Formatter | http://java.sun.com/javase/6/docs/api/java/util/Formatter.html] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a88a152aa7505809-004168e7-4e014d45-a2af89d3-5b0ad1afa42ec5a0c3c51259"><ac:plain-text-body><![CDATA[ | [[Seacord 2005 | AA. Bibliography#Seacord 05]] | Chapter 6, Formatted Output | ]]></ac:plain-text-body></ac:structured-macro> |
...