Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 9cb09d6 commit 9108982Copy full SHA for 9108982
1 file changed
cpp/ql/lib/semmle/code/cpp/security/InvalidPointerDereference/AllocationToInvalidPointer.qll
@@ -7,7 +7,7 @@
7
* 1. char* base = (char*)malloc(size);
8
* 2. char* end = base + size;
9
* 3. for(int *p = base; p <= end; p++) {
10
- * 4. use(*p);
+ * 4. use(*p); // BUG: Should have been bounded by `p < end`.
11
* 5. }
12
* ```
13
* this file identifies the flow from `new int[size]` to `base + size`.
0 commit comments