Use type definitions (typedef
) to improve code readability.
The following declaration of the signal()
function is difficult to read and comprehend.
void (*signal(int, void (*)(int)))(int); |
This compliant solution makes use of type definitions to specify the same type as in the noncompliant code example.
typedef void (*SighandlerType)(int signum); extern SighandlerType signal( int signum, SighandlerType handler ); |
Code readability is important for discovering and eliminating vulnerabilities.
Recommendation | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
DCL05-C | low | unlikely | medium | P2 | L3 |
Tool | Version | Checker | Description |
---|---|---|---|
299 S | Fully implemented | ||
Compass/ROSE |
|
|
|
PRQA QA-C | Secondary Analysis | Fully implemented |
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
CERT C++ Secure Coding Standard | DCL05-CPP. Use typedefs to improve code readability |
---|---|
ISO/IEC TR 24772 | Leveraging human experience [BRS] |