Risk Assessment Summary
Rule | Severity | Likelihood | Detectable | Repairable | Priority | Level |
|---|---|---|---|---|---|---|
| PRE30-C | Low | Unlikely | Yes | No | P2 | L3 |
| PRE31-C | Low | Unlikely | No | Yes | P2 | L3 |
| PRE32-C | Low | Unlikely | Yes | Yes | P3 | L3 |
Rule | Severity | Likelihood | Detectable | Repairable | Priority | Level |
|---|---|---|---|---|---|---|
| PRE30-C | Low | Unlikely | Yes | No | P2 | L3 |
| PRE31-C | Low | Unlikely | No | Yes | P2 | L3 |
| PRE32-C | Low | Unlikely | Yes | Yes | P3 | L3 |
2 Comments
David Svoboda
Dec 09, 2010PCLint has error 553 (see http://gimpel-online.com/MsgRef.html), which identifies undefined preprocessor macros that are used in a macro context, such as #if. Do we need a secure coding rule about this?
Martin Sebor
Dec 11, 2010It's not uncommon to reference an undefined macro in the
#ifdirective:When
HAVE_SOME_FEATUREis not defined by the configuration script it's treated as if its value was 0. That said, some compilers (EDG eccp being one) have an option to make it possible to diagnose these usually benign cases.