Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: REM Cost Reform

...

Failure to follow this recommendation can result in memory corruption from buffer overflows, which can easily corrupt data or yield remote code execution.

Rule

Severity

Likelihood

Detectable

RepairableRemediation Cost

Priority

Level

API01-C

High

Likely

Yes

NoHigh

P9P18

L2L1

Automated Detection

Tool

Version

Checker

Description

Astrée
Include Page
Astrée_V
Astrée_V

array_out_of_bounds

field_overflow_upon_dereference

Supported
Parasoft C/C++test
Include Page
Parasoft_V
Parasoft_V

CERT_C-API01-a
CERT_C-API01-b

Avoid overflow when writing to a buffer
Avoid using unsafe string functions which may cause buffer overflows

...