...
Incorrectly using a variadic function can result in abnormal program termination, unintended information disclosure, or execution of arbitrary code.
Rule | Severity | Likelihood | Detectable | RepairableRemediation Cost | Priority | Level |
|---|---|---|---|---|---|---|
DCL50-CPP | High | Probable | Yes | NoMedium | P12 | L1 |
Automated Detection
Tool | Version | Checker | Description | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| function-ellipsis | Fully checked | |||||||||||||||
| Axivion Bauhaus Suite |
| CertC++-DCL50 | ||||||||||||||||
| Clang |
| cert-dcl50-cpp | Checked by clang-tidy. | |||||||||||||||
| CodeSonar |
| LANG.STRUCT.ELLIPSIS
| Ellipsis | |||||||||||||||
| Helix QAC |
| C++2012, C++2625 | ||||||||||||||||
| Klocwork |
| MISRA.FUNC.VARARG | ||||||||||||||||
| LDRA tool suite |
| 41 S | Fully Implemented | |||||||||||||||
| Parasoft C/C++test |
| CERT_CPP-DCL50-a | Functions shall not be defined with a variable number of arguments | |||||||||||||||
| Polyspace Bug Finder |
| CERT C++: DCL50-CPP | Checks for function definition with ellipsis notation (rule fully covered) | |||||||||||||||
| PRQA QA-C++RuleChecker |
| 2012, 2625 | RuleCheckerfunction-ellipsis | Fully checked | ||||||||||||||
| Security Reviewer - Static Reviewer |
| RuleChecker
| RuleChecker
| function-ellipsisUNSAFE_09 | Fully | checkedimplemented | ||||||||||||
| SonarQube C/C++ Plugin |
| FunctionEllipsis | Helix QAC | |||||||||||||||
| Include Page | Helix QAC_V | Helix QAC_V | Klocwork | |||||||||||||||
| Include Page | Klocwork_V | Klocwork_V | MISRA.FUNC.VARARG
Related Vulnerabilities
Search for other vulnerabilities resulting from the violation of this rule on the CERT website.
...