...
| Code Block | ||||
|---|---|---|---|---|
| ||||
void my_memset(size_t n, char p[n], char v) {
memset(p, v, n);
}
|
Exceptions
API05-C-EX0: The extended array syntax is not supported by MSVC. Consequently, C programs that must support Windows need not use conformant array parameters. One option for portable code that must support MSVC is to use macros:
| Code Block | ||||
|---|---|---|---|---|
| ||||
#include <stddef.h> #if defined (_MSC_VER) #define N(x) #else #define N(x) (x) #endif int f(size_t n, int a[N(n)]); |
Risk Assessment
Failing to specify conformant array dimensions increases the likelihood that another developer will invoke the function with out-of-range integers, which could cause an out-of-bounds memory read or write.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
API05-C | High | Probable | Medium | P12 | L1 |
Bibliography
| [ISO/IEC 9899:2011] | Subclause 6.7.6.2, "Array Declarators" Subclause 6.7.6.3, "Function Declarators (Including Prototypes)" |
...
...