...
The concatenation of wide and narrow string literals could lead to undefined behavior.
Rule | Severity | Likelihood | Detectable | RepairableRemediation Cost | Priority | Level |
|---|---|---|---|---|---|---|
STR10-C | Low | Probable | Yes | MediumNo | P4 | L3 |
Automated Detection
Tool | Version | Checker | Description | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| encoding-mismatch | Fully checked | ||||||||||||||||||
| Axivion Bauhaus Suite |
| CertC-STR10 | |||||||||||||||||||
| ECLAIR |
| CC2.STR10 | Fully implemented. | ||||||||||||||||||
| Helix QAC |
| C0874 | |||||||||||||||||||
| LDRA tool suite |
| 450 S | Fully implemented | ||||||||||||||||||
| Parasoft C/C++test |
| CERT_C-STR10-a | Narrow and wide string literals shall not be concatenated | ||||||||||||||||||
| PRQA QAPC-Clint Plus |
| PRQA QA
| C
| v
| PRQA QA
| C_v0874
| 707 | Fully supported | |||||||||||||
| SonarQube C/C++ Plugin |
| NarrowAndWideStringConcat | |||||||||||||||||||
| RuleChecker |
| encoding-mismatch | Fully checked |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...