[C-safe-secure-studygroup] checker

[Robert Seacord]

Has anyone implemented a static analysis checker that would detect when a
programmer incorrectly specifies the size of the source array instead of
the destination array, for example:

void func (void) {

  char source[] = "...";

  char dest[N];

  ...

  strcpy_s(dest, sizeof source, source);



}



Thanks,
rCs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.trustable.io/pipermail/c-safe-secure-studygroup/attachments/20190123/95c58478/attachment.html>