Page History

stdlib-array-size
stdlib-string-size
strcpy-limits
array_out_of_bounds

Supported

Astrée reports all out-of-bound accesses within library analysis stubs. The user may provide additional stubs for arbitrary (library) functions.

LANG.MEM.BO
LANG.MEM.BU

Buffer overrun
Buffer underrun

Compass/ROSE

BUFFER_SIZE

BAD_SIZEOF

BAD_ALLOC_STRLEN

BAD_ALLOC_ARITHMETIC

Fortify SCA

5.0

Can detect violations of this rule with CERT C Rule Pack

C2840

DF2840, DF2841, DF2842, DF2843, DF2845, DF2846, DF2847, DF2848, DF2935, DF2936, DF2937, DF2938, DF4880, DF4881, DF4882, DF4883

Klocwork

ABV.GENERAL
ABV.GENERAL.MULTIDIMENSION

CERT_C-ARR38-a
CERT_C-ARR38-b
CERT_C-ARR38-c
CERT_C-ARR38-d

Avoid overflow when reading from a buffer
Avoid overflow when writing to a buffer
Avoid buffer overflow due to defining incorrect format limits
Avoid overflow due to reading a not zero terminated string

419, 420

Partially supported

CERT C: Rule ARR38-C

Checks for:

• Mismatch between data length and size
• Invalid use of standard library memory routine
• Possible misuse of sizeof
• Buffer overflow from incorrect string format specifier
• Invalid use of standard library string routine
• Destination buffer overflow in string manipulation
• Destination buffer underflow in string manipulation

Rule partially covered.

C109

Fully Implemented

Splint