...
DCL01-C-EX2: A temporary variable within a new scope inside of a macro can override a surrounding identifier.override an identifier in a containing scope. However,this exception does not apply to to the arguments of the macro itself.
| Code Block | ||||
|---|---|---|---|---|
| ||||
#define SWAP(type, a, b) do { type tmp = a; a = b; b = tmp; } while(0)
void func(void) {
int tmp = 100;
int a = 10, b = 20;
SWAP(int, a, b); /* Hidden redeclaration of tmp is acceptable */
SWAP(int, tmp, b); /* NONCOMPLIANT: Hidden redeclaration of tmp clashes with argument */
} |
Risk Assessment
Reusing a variable name in a subscope can lead to unintentionally referencing an incorrect variable.
Recommendation | Severity | Likelihood | Detectable | Remediation CostRepairable | Priority | Level |
|---|---|---|---|---|---|---|
DCL01-C | Low | Unlikely | Yes | YesMedium | P2P3 | L3 |
Automated Detection
Tool | Version | Checker | Description | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| Supported indirectly via MISRA C:2012 Rule 5.3. | ||||||||||||||||||
| Axivion Bauhaus Suite |
| CertC-DCL01 | ||||||||||||||||||
| CodeSonar |
| LANG.ID.ND.NEST | Non-distinct identifiers: nested scope | |||||||||||||||||
| Compass/ROSE | ||||||||||||||||||||
| CC2.DCL01 | Fully implemented | ||||||||||||||||||
| Helix QAC |
| C0795, C0796, C2547, C3334 | ||||||||||||||||||
| Klocwork |
| MISRA.VAR.HIDDEN | ||||||||||||||||||
| LDRA tool suite |
| 131 S | Fully implemented | |||||||||||||||||
| Parasoft C/C++test |
| CERT_C-DCL01-a | Identifier declared in a local or function prototype scope shall not hide an identifier declared in a global or namespace scope | |||||||||||||||||
| PC-lint Plus |
| 578 | Fully supported | |||||||||||||||||
| Polyspace Bug Finder |
| MISRA 2012 Rule 5.3 | Variable hides another variable of same name with nested scope An identifier declared in an inner scope shall not hide an identifier declared in an outer scope | Checks for variable shadowing (rule fully covered) | ||||||||||||||||
| PRQA QA-C | ||||||||||||||||||||
| Include Page | PRQA QA-C_v | PRQA QA-C_v | 0795, 0796, 2547, 3334 | Fully implemented | PRQA QA-C++ | |||||||||||||||
| Include Page | cplusplus:PRQA QA-C++_V | cplusplus:PRQA QA-C++_V | 2500, 2501, 2502, 2503, 2504, 2505 | PVS-Studio |
| V561, V688, V703, V711, V2015 | ||||||||||||||
| RuleChecker |
| Supported indirectly via MISRA C:2012 Rule 5.3. | ||||||||||||||||||
| Security Reviewer - Static Reviewer | 6.02 | C126 C127 | Fully Implemented | |||||||||||||||||
| Splint |
|
...
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
Related Guidelines
| SEI CERT C++ Coding Standard | VOID DCL01-CPP. Do not reuse variable names in subscopes |
| MISRA C:2012 | Rule 5.3 (required) |
...