Page History

IO.INJ.FMT
MISC.FMT

Format string injection
Format string

Can detect violations of this recommendation when the -Wformat flag is used

SV.FMT_STR.PRINT_FORMAT_MISMATCH.BAD
SV.FMT_STR.PRINT_FORMAT_MISMATCH.UNDESIRED
SV.FMT_STR.PRINT_IMPROP_LENGTH
SV.FMT_STR.PRINT_PARAMS_WRONGNUM.FEW

486 S
589 S

Fully implemented

CERT_C-FIO47-a
CERT_C-FIO47-b
CERT_C-FIO47-c
CERT_C-FIO47-d
CERT_C-FIO47-e
CERT_C-FIO47-f

There should be no mismatch between the '%s' or and '%c' tag from format specifiers in the format string and its their corresponding argument in 'printf' function invocationarguments in the invocation of a string formatting function
There should be no mismatch between the '%f' tag from format specifier in the format string and its corresponding argument in 'printf' function invocationthe invocation of a string formatting function
There should be no mismatch between the '%i' or and '%d' tag from format specifiers in the string and its their corresponding argument in 'printf' function invocationarguments in the invocation of a string formatting function
There should be no mismatch between the '%u' tag from format specifier in the format string and its corresponding argument in 'printf' function invocationthe invocation of a string formatting function
There should be no mismatch between the '%p' tag from format specifier in the format string and its corresponding argument in 'printf' function invocation
There should be no difference between the number of tags from the invocation of a string formatting function
The number of format specifiers in the format string and the number of corresponding argument in 'printf' function invocationarguments in the invocation of a string formatting function should be equal

String specifiers do not match corresponding arguments

0161, 0162, 0163, 0164, 0165, 0166, 0167, 0168, 0169,

0170, 0171, 0172, 0173, 0174, 0175, 0176, 0177, 0178,

0179 [U], 0180 [C99], 0184 [U], 0185 [U], 0190 [U],

0191 [U], 0192 [U], 0193 [U], 0194 [U], 0195 [U], 0196 [U],

0197 [U], 0198 [U], 0199 [U], 0200 [U], 0201 [U], 0202 [I],

0204 [U], 0206 [U]