Menu

Rules for CWE-134,135,190 in cppcheck tool

2017-09-21
2018-05-08
  • Kothuru Avinash

    Kothuru Avinash - 2017-09-21

    Hi,
    I am new with security assessment. As part of performance testing, we want to analyze the security vulnerabilities in code. Hence we decided to validate with cppcheck tool and run through our code. Where the tool showed actual issues. But, mainly we are looking for CWE-134,135,190. Where I didn't find in the cppcheck release. Can anyone please provide the details to inlcude these id's/rules in the tool. Hence It may solve my problem

    Thanks for the replies.

     
  • versat

    versat - 2018-05-08

    You can call Cppcheck with the parameter --errorlist and you will get a list of issues Cppcheck can detect and their CWE id if there is one.
    I have not found 134 and 135 but 190:

    <error id="integerOverflow" severity="error" msg="Signed integer overflow for expression &apos;&apos;." verbose="Signed integer overflow for expression &apos;&apos;." cwe="190"/>
    

    Since it has the error severity you do not have to enable it explicitly. Just look for integerOverflow issues in the results.

     

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.