...
| Code Block | ||||
|---|---|---|---|---|
| ||||
#include <stddef.h> #if defined (_MSC_VER) #define N(x) #else #define N(x) (x) #endif int f(size_t n, int a[N(n)]); |
Risk Assessment
Failing to specify conformant array dimensions increases the likelihood that another developer will invoke the function with out-of-range integers, which could cause an out-of-bounds memory read or write.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
API05-C | High | Probable | Medium | P12 | L1 |
Bibliography
| [ISO/IEC 9899:2011] | Subclause 6.7.6.2, "Array Declarators" Subclause 6.7.6.3, "Function Declarators (Including Prototypes)" |
...
...