6.2.12.15. SecureCoding

ISO-TS-17961 C Secure Coding

Nested Rules

SecureCoding-5.1	Accessing an object through a pointer to an incompatible type
SecureCoding-5.2	Accessing freed memory
SecureCoding-5.3	Accessing shared objects in signal handlers
SecureCoding-5.4	No assignment in conditional expressions
SecureCoding-5.5	Calling functions in the C Standard Library other than abort, _Exit, and signal from within a signal handler
SecureCoding-5.6	Calling functions with incorrect arguments
SecureCoding-5.7	Calling signal from interruptible signal handlers
SecureCoding-5.8	Passing arguments to character-handling functions that are not representable as unsigned char
SecureCoding-5.9	Comparison of padding data
SecureCoding-5.10	Converting a pointer to integer or integer to pointer
SecureCoding-5.12	Copying a FILE object
SecureCoding-5.13	Declaring the same function or object in incompatible ways
SecureCoding-5.15	Escaping of the address of an automatic object
SecureCoding-5.17	Use of an implied default in a switch statement
SecureCoding-5.18	Failing to close files or free dynamic memory when they are no longer needed
SecureCoding-5.19	Failing to detect and handle standard library errors
SecureCoding-5.21	Allocating insufficient memory
SecureCoding-5.23	Freeing memory multiple times
SecureCoding-5.25	Incorrectly setting and using errno
SecureCoding-5.26	Integer division errors
SecureCoding-5.28	Modifying string literals
SecureCoding-5.30	Overflowing signed integers
SecureCoding-5.31	Passing a non-null-terminated character sequence to a library function that expects a string
SecureCoding-5.32	Passing arguments to character-handling functions that are not representable as unsigned char
SecureCoding-5.34	Reallocating or freeing memory that was not dynamically allocated
SecureCoding-5.35	Referencing uninitialized memory
SecureCoding-5.36	Subtracting or comparing two pointers that do not refer to the same array
SecureCoding-5.38	Taking the size of a pointer to determine the size of the pointed-to type
SecureCoding-5.40	Using a tainted value to write to an object using a formatted input or output function
SecureCoding-5.43	Using character values that are indistinguishable from EOF
SecureCoding-5.44	Using identifiers that are reserved for the implementation
SecureCoding-5.45	Using invalid format strings

Options

• Setting an option for this rule means setting the default for all nested rules.

• This rule shares the following common options: exclude_in_macros, exclude_messages_in_system_headers, excludes, extend_exclude_to_macro_invocations, includes, justification_checker, languages, post_processing, provider, report_at, severity

• The following places define options that affect this rule: Stylechecks, Analysis-GlobalOptions

• This rule has no individual options.