iframe-proxy | Sunbelt Computer Software

21 lines (19 loc) · 619 Bytes

 * @name Incorrect return-value check for a 'scanf'-like function
 * @description Failing to account for EOF in a call to a scanf-like function can lead to
 *             undefined behavior.
 * @kind problem
 * @problem.severity warning
 * @security-severity 7.5
 * @precision high
 * @id cpp/incorrectly-checked-scanf
 * @tags security
 *       correctness
 *       external/cwe/cwe-253
import semmle.code.cpp.commons.Scanf
import ScanfChecks
from ScanfFunctionCall call
where incorrectlyCheckedScanf(call)
select call, "The result of scanf is only checked against 0, but it can also return EOF."

Sunbelt Computer Software

PL/B Language Development and Support

Navigation Menu

Uh oh!

Sunbelt Computer Software

PL/B Language Development and Support

Uh oh!

FilesExpand file tree

IncorrectCheckScanf.ql

Latest commit

History

IncorrectCheckScanf.ql

File metadata and controls