
An object that has volatile-qualified type may be modified in ways unknown to the implementation or have other unknown side effects. Referencing a volatile object by using a non-volatile lvalue is undefined behavior. The C Standard, 6.7.3 4 paragraph 7 [ISO/IEC 9899:20112024], states
If an attempt is made to refer to an object defined with a volatile-qualified type through use of an lvalue with non-volatile-qualified type, the behavior is undefined.
Noncompliant Code Example
In this noncompliant code example, a volatile object is accessed through a non-volatile-qualified reference, resulting in undefined behavior 62:
Code Block | ||||
---|---|---|---|---|
| ||||
#include <stdio.h> void func(void) { static volatile int **ipp; static int *ip; static volatile int i = 0; printf("i = %d.\n", i); ipp = &ip; /* May produce a warning diagnostic */ ipp = (int**) &ip; /* Constraint violation; may produce a warning diagnostic */ *ipp = &i; /* Valid */ if (*ip != 0) { /* Valid */ /* ... */ } } |
...
Accessing an object with a volatile-qualified type through a reference with a non-volatile-qualified type is undefined behavior 62.
Rule | Severity | Likelihood | Detectable | Remediation CostRepairable | Priority | Level |
---|---|---|---|---|---|---|
EXP32-C | Low | Likely | No | MediumYes | P6 | L2 |
Automated Detection
Tool | Version | Checker | Description | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Astrée |
| pointer-qualifier-cast-volatile pointer-qualifier-cast-volatile-implicit | Supported indirectly via MISRA C 2012 Rule 11.8 | ||||||||||||
Axivion Bauhaus Suite |
| CertC-EXP32 | Fully implemented | ||||||||||||
Clang |
| -Wincompatible-pointer-types-discards-qualifiers | |||||||||||||
Compass/ROSE | |||||||||||||||
Coverity |
| MISRA C 2012 Rule 11.8 | Implemented | ||||||||||||
Cppcheck Premium |
| premium-cert-exp32-c | |||||||||||||
GCC |
| Can detect violations of this rule when the | |||||||||||||
Helix QAC |
| C0312C0312, C0562, C0563, C0673, C0674 | Fully implemented | ||||||||||||
Klocwork |
| CERT.EXPR.VOLATILE.ADDR | PTRPTRORTING.VAR.EFFECTSPTRPTR | Fully implemented | |||||||||||
LDRA tool suite |
| 344 S | Partially implemented | ||||||||||||
Parasoft C/C++test |
| CERT_C-EXP32-a | A cast shall not remove any 'const' or 'volatile' qualification from the type of a pointer or reference | ||||||||||||
Polyspace Bug Finder |
| Checks for cast to pointer that removes const or volatile qualification (rule fully covered) | PRQA QA-C | ||||||||||||
Include Page | PRQA QA-C_v | 0312,562,563,673,674 | Fully implemented | ||||||||||||
RuleChecker |
| pointer-qualifier-cast-volatile pointer-qualifier-cast-volatile-implicit | Supported indirectly via MISRA C 2012 Rule 11.8 |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...
Bibliography
[ISO/IEC 9899:20112024] | 6.7.34, "Type Qualifiers" |
...