...
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| bad-function-use | Partially checked | ||||||
| Axivion Bauhaus Suite |
| CertC-ERR34 | |||||||
| Clang |
| cert-err34-c | Checked by clang-tidy | ||||||
| CodeSonar |
| BADFUNC.ATOF (customization) | Use of atof Users can add custom checks for uses of other undesirable conversion functions. | ||||||
| Compass/ROSE | Can detect violations of this recommendation by flagging invocations of the following functions:
| ||||||||
| Helix QAC |
| C5030 C++5016 | |||||||
| Klocwork |
| CERT.ERR.CONV.STR_TO_NUM | |||||||
| LDRA tool suite |
| 44 S | Fully implemented | ||||||
| Parasoft C/C++test |
| CERT_C-ERR34-a | The 'atof', 'atoi', 'atol' and 'atoll' functions from the 'stdlib.h' or 'cstdlib' library should not be used | ||||||
| PC-lint Plus |
| 586 | Assistance provided | ||||||
| CERT C: Rule ERR34-C | Checks for unsafe conversion from string to numeric value (rule fully covered) | |||||||
| RuleChecker |
| bad-function-use scanf-string-to-number | Partially checked | ||||||
| SonarQube C/C++ Plugin |
| S989 |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...