...
Using setjmp() and longjmp() could lead to a denial-of-service attack due to resources not being properly destroyed.
Rule | Severity | Likelihood | Detectable | RepairableRemediation Cost | Priority | Level |
|---|---|---|---|---|---|---|
ERR52-CPP | Low | Probable | Yes | MediumNo | P4 | L3 |
Automated Detection
Tool | Version | Checker | Description | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| include-setjmp | Fully checked | |||||||||
| Axivion Bauhaus Suite |
| CertC++-ERR52 | ||||||||||
| Clang |
| cert-err52-cpp | Checked by clang-tidy. | |||||||||
| CodeSonar |
| BADFUNC.LONGJMP | Use of longjmp Use of setjmp Use of <setjmp.h> | |||||||||
| Helix QAC |
| C++5015 | ||||||||||
| Klocwork |
| MISRA.STDLIB.LONGJMP | ||||||||||
| LDRA tool suite |
| 43 S | Fully implemented | |||||||||
| Parasoft C/C++test |
| CERT_CPP-ERR52-a | The setjmp macro and the longjmp function shall facilities provided by <setjmp.h> should not be used | |||||||||
| Polyspace Bug Finder |
| CERT C++: ERR52-CPP | Checks for use of setjmp/longjmp (rule fully covered) | PRQA QA-C++|||||||||
| RuleChecker |
| PRQA QA-C++
| PRQA QA-C++
| 5015include-setjmp | Fully checked | |||||||
| SonarQube C/C++ Plugin |
| S982 |
...