...
Depending on the version of Windows the application is run on, failure to properly specify the library can lead to arbitrary code execution.
Recommendation | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
WIN00-C | High | Unlikely | Low | P9 | L2 |
Automated Detection
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| BADFUNC.PATH.AFXLOADLIBRARY | Use of | ||||||
| Klocwork |
| SV.DLLPRELOAD.NONABSOLUTE.DLL SV.DLLPRELOAD.NONABSOLUTE.EXE SV.DLLPRELOAD.SEARCHPATH |
| Parasoft C/C++test |
| CERT_C-WIN00-a | Use care to ensure that LoadLibrary() will load the correct library | |||||||
| PC-lint Plus |
| 586 | Fully supported | ||||||
| Polyspace Bug Finder |
|
|
| Checks for: |
|
|
|
Rec. partially covered. |
Related Guidelines
...
Bibliography
...
...