...
Recommendation | Severity | Likelihood | Detectable | RepairableRemediation Cost | Priority | Level |
|---|---|---|---|---|---|---|
MEM05-C | Medium | Likely | No | MediumNo | P12P6 | L1L2 |
Automated Detection
Tool | Version | Checker | Description | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| IO.TAINT.SIZE MISC.MEM.SIZE.BAD | Tainted Allocation Size Unreasonable Size Argument | ||||||||||||||||
| STACK_USE | Can help detect single stack allocations that are dangerously large, although it will not detect excessive stack use resulting from recursion | |||||||||||||||||
| Helix QAC |
| C1051, C1520, C3670 | |||||||||||||||||
| Klocwork |
| MISRA.FUNC.RECUR | |||||||||||||||||
| LDRA tool suite |
| 44 S | Enhanced Enforcement | ||||||||||||||||
| Parasoft C/C++test |
| CERT_C-MEM05-a | Do not use recursion | ||||||||||||||||
| PC-lint Plus |
| 9035, 9070 | Partially supported: reports use of variable length arrays and recursion | ||||||||||||||||
| Polyspace Bug Finder |
| Checks for:
| Tainted size of variable length array
| Size of the variable-length array (VLA) is from an unsecure source and may be zero, negative, or too large Size of variable-length array is zero or negative Functions shall not call themselves, either directly or indirectly | PRQA QA-C | ||||||||||||||
| Include Page | PRQA QA-C_v | PRQA QA-C_v |
Rec. partially covered. | ||||||||||||||||
| PVS-Studio |
| V505 | |||||||||||||||||
| Security Reviewer - Static Reviewer |
| CPP_010 | Fully implemented | 1051, 1520, 2052, 3670 | Partially implemented | PVS-Studio | |||||||||||||
| Include Page | PVS-Studio_V | PVS-Studio_V | V505
Related Vulnerabilities
Stack overflow has been implicated in Toyota unintended acceleration cases, where Camry and other Toyota vehicles accelerated unexpectedly. Michael Barr testified at the trial that a stack overflow could corrupt the critical variables of the operating system, because they were located in memory adjacent to the top of the stack [Samek 2014].
...