没有合适的资源?快使用搜索试试~ 我知道了~
首页polyspace-bug-finder-results-bug-finder
polyspace-bug-finder-results-bug-finder

用于嵌入式软件静态分析测试工具-matlab polyspace bug finder
资源详情
资源评论
资源推荐

mathworks.com
Polyspace Results in Polyspace Bug Finder
Review Analysis Results
Polyspace Bug Finder Results
Defects
Numerical Defects
Absorption of float operand
One addition or subtraction operand is absorbed by the other
operand
Bitwise operation on
negative value
Undefined behavior for bitwise operations on negative values
Float conversion overflow
Overflow when converting between floating point data types
Float division by zero
Dividing floating point number by zero
Float overflow
Overflow from operation between floating points
Integer conversion overflow
Overflow when converting between integer types
Integer division by zero
Dividing integer number by zero
Integer overflow
Overflow from operation between integers
Invalid use of standard
library floating point
routine
Wrong arguments to standard library function
Invalid use of standard
library integer routine
Wrong arguments to standard library function
Shift of a negative value
Shift operator on negative value
Shift operation overflow
Overflow from shifting operation
Sign change integer
conversion overflow
Overflow when converting between signed and unsigned integers
Unsigned integer
conversion overflow
Overflow when converting between unsigned integer types
Unsigned integer overflow
Overflow from operation between unsigned integers
Use of plain char type for
numerical value
Plain char variable in arithmetic operation without explicit
signedness

mathworks.com
Static Memory Defects
Arithmetic operation with
NULL pointer
Arithmetic operation performed on NULL pointer
Array access out of bounds
Array index outside bounds during array access
Buffer overflow from incor-
rect string format specifier
String format specifier causes buffer argument of standard library
functions to overflow
Destination buffer overflow
in string manipulation
Function writes to buffer at offset greater than buffer size
Destination buffer underflow
in string manipulation
Function writes to buffer at a negative offset from beginning of
buffer
Invalid use of standard
library memory routine
Standard library memory function called with invalid arguments
Invalid use of standard
library string routine
Standard library string function called with invalid arguments
Null pointer
NULL pointer dereferenced
Pointer access out of bounds
Pointer dereferenced outside its bounds
Pointer or reference to stack
variable leaving scope
Pointer to local variable leaves the variable scope
Subtraction or comparison
between pointers to different
arrays
Subtraction or comparison between pointers causes undefined
behavior
Unreliable cast of function
pointer
Function pointer cast to another function pointer with different
argument or return type
Unreliable cast of pointer
Pointer implicitly cast to different data type
Use of automatic variable as
putenv-family function
argument
putenv-family function argument not accessible outside its scope
Use of path manipulation
function without maximum
sized buffer checking
Destination buffer of getwd or realpath is smaller than PATH_MAX
bytes
Wrong allocated object size
for cast
Allocated memory does not match destination pointer

mathworks.com
Dynamic Memory Defects
Alignment changed after
memory reallocation
Memory reallocation changes the originally stricter alignment of
an object
Deallocation of previously
deallocated pointer
Memory freed more than once without allocation
Invalid free of pointer
Pointer deallocation without a corresponding dynamic allocation
Invalid deletion of pointer
Pointer deallocation using delete without corresponding allocation
using new
Memory leak
Memory allocated dynamically not freed
Mismatched alloc/dealloc
functions on Windows
Improper deallocation function causes memory corruption issues
Unprotected dynamic memory
allocation
Pointer returned from dynamic allocation not checked for NULL
value
Use of previously freed
pointer
Memory accessed after deallocation
Programming Defects
Abnormal termination of
exit handler
Exit handler function interrupts the normal execution of a program
Alternating input and output
from a stream without flush
or positioning call
Undefined behavior for input or output stream operations
Assertion
Failed assertion statement
Bad file access mode or
status
Access mode argument of function in fopen or open group is
invalid
Call through non-prototyped
function pointer
Function pointer declared without its type or number of parameters
causes unexpected behavior
Call to memset with
unintended value
memset or wmemset used with possibly incorrect arguments
Character value absorbed
into EOF
Data type conversion makes a valid character value same as End-
of-File (EOF)
Copy of overlapping memory
Source and destination arguments of a copy function have over-
lapping memory
Declaration mismatch
Mismatch between function or variable declarations
Errno not reset
errno not reset before calling a function that sets errno
Exception caught by value
catch statement accepts an object by value
Exception handler hidden by
previous handler
catch statement is not reached because of an earlier catch state-
ment for the same exception
Floating point comparison
with equality operators
Imprecise comparison of floating-point variables

mathworks.com
Programming Defects - continued
Format string specifiers and
arguments mismatch
String specifiers do not match corresponding arguments
Function called from signal
handler not asynchronous-safe
Call to interrupted function causes undefined program behavior
Function called from signal
handler not asynchronous-safe
(strict)
Call to interrupted function causes undefined program behavior
Improper array initialization
Incorrect array initialization when using initializers
Incorrect pointer scaling
Implicit scaling in pointer arithmetic might be ignored
Invalid assumptions about
memory organization
Address is computed by adding or subtracting from address of a
variable
Invalid file position
fsetpos() is invoked with a file position argument not obtained from
fgetpos()
Invalid use of = (assignment)
operator
Assignment in conditional statement
Invalid use of == (equality)
operator
Equality operation in assignment statement
Invalid use of standard
library routine
Wrong arguments to standard library function
Invalid va _ list argument
Variable argument list used after invalidation with va_end or not
initialized with va_start or va_copy
Memory comparison of
padding data
memcmp compares data stored in structure padding
Memory comparison of strings
memcmp compares data stored in strings after the null terminator
Missing byte reordering when
transfering data
Different endianness of host and network
Missing null in string array
String does not terminate with null character
Misuse of a FILE object
Use of copy of FILE object
Misuse of structure with
flexible array member
Memory allocation ignores flexible array member
Misuse of sign-extended
character value
Data type conversion with sign extension causes unexpected
behavior
Misuse of return value from
nonreentrant standard
function
Pointer to static buffer from previous call is used despite a subse-
quent call that modifies the buffer
Misuse of errno
errno incorrectly checked for error conditions
Modification of internal
buffer returned from nonreen-
trant standard function
Function attempts to modify internal buffer returned from a nonre-
entrant standard function
Overlapping assignment
Memory overlap between left and right sides of an assignment
Possible misuse of sizeof
Use of sizeof operator can cause unintended results
剩余18页未读,继续阅读





安全验证
文档复制为VIP权益,开通VIP直接复制

评论1