Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Tool

Version

Checker

Description

Compass/ROSE



Could detect the specific noncompliant code example. It could identify when the result of a % operation might be negative and flag usage of that result in an array index. It could conceivably flag usage of any such result without first checking that the result is positive, but it would likely introduce many false positives

LDRA tool suite
Include Page
LDRA_V
LDRA_V

584 S

Fully implemented

Parasoft C/C++test
Include Page
Parasoft_V
Parasoft_V

CERT_C-INT10-a

Avoid accessing arrays out of bounds

Polyspace Bug Finder

Include Page
Polyspace Bug Finder_V
Polyspace Bug Finder_V

Tainted modulo operand

MISRA CERT C: 2012 Dir 4.14

Remainder (%) operands are from an unsecure source

The validity of values received from external sources shall be checked

Rec. INT10-C


Checks for tainted modulo operand (rec. fully covered)


PRQA QA-C
Include Page
PRQA QA-C_v
PRQA QA-C_v
3103Fully implemented

...