The C Language facilties setjmp() and longjmp() can be used to simulate the throwing of exceptions, but they are very low-level facilities and using them can bypass proper resource management and the proper calling of destructors.

Non-Compliant Code Example

Compliant Solution

Priority: P4 Level: L3

Using setjmp() and longjmp() could lead to a denial-of-service attack.

Component

Value

Severity

1 (low)

Likelihood

2 (probable)

Remediation cost

2 (medium)

References