PVS-StudioWarnings

PVS-Studio warning V512 for Apache

Nov 20th, 2014
181
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
C++ 0.63 KB | None | 0 0
  1. #define MEMSET_BZERO(p,l)       memset((p), 0, (l))
  2.  
  3. void apr__SHA256_Final(sha2_byte digest[],
  4.                        SHA256_CTX* context) {
  5.   ...
  6.   MEMSET_BZERO(context, sizeof(context));
  7.   ...
  8. }
  9.  
  10. This is what should have been written here: sizeof(*context)
  11.  
  12.  
  13. This suspicious code was found in Apache project by PVS-Studio static code analyzer.
  14. Warning message is:
  15. V512 A call of the 'memset' function will lead to underflow of the buffer '(context)'. apr sha2.c 560
  16.  
  17. PVS-Studio is a static analyzer for detecting bugs in the source code of applications written in C, C++, C++11, C++/CX. Site: http://www.viva64.com/en/pvs-studio/
Advertisement
Add Comment
Please, Sign In to add comment