Skip to main content
assistive.skiplink.to.breadcrumbs
assistive.skiplink.to.header.menu
assistive.skiplink.to.action.menu
assistive.skiplink.to.quick.search

08. Memory Management (MEM)

Created by Robert C. Seacord, last modified by David Svoboda on Jun 13, 2008

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Recommendations

MEM00-A. Allocate and free memory in the same module, at the same level of abstraction

MEM01-A. Store a new value in pointers immediately after free()

MEM02-A. Immediately cast the result of a memory allocation function call into a pointer to the allocated type

MEM03-A. Clear sensitive information stored in reusable resources returned for reuse

MEM04-A. Do not perform zero length allocations

MEM05-A. Avoid large stack allocations

MEM06-A. Ensure that sensitive data is not written out to disk

MEM07-A. Ensure that the arguments to calloc() when multiplied can be represented as a size_t

MEM08-A. Use realloc() only to resize dynamically allocated arrays

MEM09-A. Do not assume memory allocation routines initialize memory

MEM10-A. Use a pointer validation function

Rules

MEM30-C. Do not access freed memory

MEM31-C. Free dynamically allocated memory exactly once

MEM32-C. Detect and handle memory allocation errors

MEM33-C. Use the correct syntax for flexible array members

MEM34-C. Only free memory allocated dynamically

MEM35-C. Allocate sufficient memory for an object

Risk Assessment Summary

Recommendation	Severity	likelihood	Remediation Cost	Priority	Level
MEM00-A	high	probable	medium	P12	L1
MEM01-A	high	unlikely	low	P9	L2
MEM02-A	low	unlikely	low	P3	L3
MEM03-A	medium	unlikely	high	P2	L3
MEM04-A	low	likely	medium	P6	L2
MEM05-A	low	likely	medium	P6	L2
MEM06-A	medium	unlikely	high	P2	L3
MEM07-A	high	unlikely	medium	P6	L2
MEM08-A	high	likely	medium	P18	L1
MEM09-A	medium	unlikely	medium	P4	L3
MEM10-A	low	unlikely	high	P1	L3

Rule	Severity	likelihood	Remediation Cost	Priority	Level
MEM30-C	high	likely	medium	P18	L1
MEM31-C	high	probable	medium	P12	L1
MEM32-C	high	likely	medium	P18	L1
MEM33-C	low	unlikely	low	P3	L3
MEM34-C	high	likely	medium	P18	L1
MEM35-C	high	probable	high	P6	L2

Related Rules and Recommendations

EXP33-C. Do not read uninitialized memory

EXP34-C. Do not dereference null pointers

INT01-C. Use size_t or rsize_t for all integer values representing the size of an object

STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator

STR35-C. Do not copy data from an unbounded source to a fixed-length array 07. Characters and Strings (STR) MEM00-A. Allocate and free memory in the same module, at the same level of abstraction

No labels