...
The C Standard, 6.3.2.3, paragraph 7 [ISO/IEC 9899:20112024], states
A pointer to an object or incomplete type may be converted to a pointer to a different object or incomplete type. If the resulting pointer is not correctly aligned for the referenced the referenced type, the behavior is undefined.
If the misaligned pointer is dereferenced, the program may terminate abnormally. On some architectures, the cast alone may cause a loss of information even if the value is not dereferenced if the types involved have differing alignment requirements.
...
Assigning an unaligned value to a pointer that references a type that needs to be aligned is undefined behavior 24. An implementation may notice, for example, that tmp and header must be aligned and use an inline memcpy() that uses instructions that assume aligned data.
...
EXP36-C-EX2: If a pointer is known to be correctly aligned to the target type, then a cast to that type is permitted. There are several cases where a pointer is known to be correctly aligned to the target type. The pointer could point to an object declared with a suitable alignment specifier. It could point to an object returned by aligned_alloc(), calloc(), malloc(), or realloc(), as per the C standard, section 7.2224.3, paragraph 1 1 [ISO/IEC 9899:20112024].
This compliant solution uses the alignment specifier, which is new to C11, to declare the char object c with the same alignment as that of an object of type int. As a result, the two pointers reference equally aligned pointer types:
...
Accessing a pointer or an object that is not properly aligned can cause a program to crash or give erroneous information, or it can cause slow pointer accesses (if the architecture allows misaligned accesses).
Rule | Severity | Likelihood | Detectable | RepairableRemediation Cost | Priority | Level |
|---|---|---|---|---|---|---|
EXP36-C | Low | Probable | No | MediumNo | P4P2 | L3 |
Automated Detection
Tool | Version | Checker | Description | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| pointer-cast-alignment | Fully checked | |||||||||||||||||
| Axivion Bauhaus Suite |
| CertC-EXP36 | ||||||||||||||||||
| CodeSonar |
| LANG.CAST.PC.OBJ | Cast: object pointers | |||||||||||||||||
| Compass/ROSE | Can detect violations of this rule. However, it does not flag explicit casts to | |||||||||||||||||||
| Coverity |
| MISRA C 2004 Rule 11.4 MISRA C 2012 Rule 11.1 MISRA C 2012 Rule 11.2 MISRA C 2012 Rule 11.5 MISRA C 2012 Rule 11.7 | Implemented | |||||||||||||||||
| Cppcheck Premium |
| premium-cert-exp36-c | ||||||||||||||||||
| CC2.EXP36 | Fully implemented | ||||||||||||||||||
| EDG | ||||||||||||||||||||
| GCC |
| Can detect some violations of this rule when the | ||||||||||||||||||
| Helix QAC |
| C0326C0326, C3305 C++3033, C++3038 | ||||||||||||||||||
| Klocwork |
| MISRA.CAST. | PTR.UNRELATEDOBJ_PTR_TO_ | INTOBJ_PTR.2012 | ||||||||||||||||
| LDRA tool suite |
| 94 S, 606 S | Partially implemented | |||||||||||||||||
| Parasoft C/C++test |
| CERT_C-EXP36-a | A cast should not be performed between a pointer to object type and a different pointer to object typeDo not cast pointers into more strictly aligned pointer types | |||||||||||||||||
| PC-lint Plus |
| 2445 | Partially supported: reports casts directly from a pointer to a less strictly aligned type to a pointer to a more strictly aligned type | |||||||||||||||||
| Polyspace Bug Finder |
| Checks for | wrong allocated object size for cast source buffer misaligned with destination buffer (rule fully covered) | PRQA QA-C | ||||||||||||||||
| Include Page | PRQA QA-C_v | PRQA QA-C_v0326, 3305 | Fully implemented | PRQA QA-C++ | ||||||||||||||||
| Include Page | cplusplus:PRQA QA-C++_V | cplusplus:PRQA QA-C++_V | ||||||||||||||||||
3033, 3038 | PVS-Studio |
| V548, V641, V1032 | |||||||||||||||||
| RuleChecker |
| pointer-cast-alignment | Fully checked | |||||||||||||||||
| Security Reviewer - Static Reviewer |
| C67 C68 C69 C70 | Fully implemented |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...
| [Bryant 2003] | |
| [ISO/IEC 9899:20112024] | 6.3.2.3, "Pointers" |
| [Walfridsson 2003] | Aliasing, Pointer Casts and GCC 3.3 |
...