Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Parasoft C/C++test 10.4

...

Tool

Version

Checker

Description

Compass/ROSE



Can detect some violations of this rule. In particular, it warns when calls to setgid() are immediately preceded by a call to setuid()

Klocwork
Include Page
Klocwork_V
Klocwork_V

SV.FIU.PROCESS_VARIANTS
SV.USAGERULES.PERMISSIONS
SV.USAGERULES.PROCESS_VARIANTS


Parasoft C/C++test

Include Page
Parasoft_V
Parasoft_V

SECURITY-44CERT_C-POS36-a

Observe correct revocation order while relinquishing privileges

Implemented

Polyspace Bug Finder

Include Page
Polyspace Bug Finder_V
Polyspace Bug Finder_V

Bad order of dropping privilegesDropped higher elevated privileges before dropping lower elevated privileges

...