@specs-feup/clava
Version:
A C/C++ source-to-source compiler written in Typescript
19 lines • 700 B
JavaScript
import { Call } from "../../../Joinpoints.js";
import Checker from "../Checker.js";
import CheckResult from "../CheckResult.js";
/**
* Check for the presence of fscanf functions
*/
export default class FscanfChecker extends Checker {
advice = " If there is no limit specification in the format specifier an attacker can cause buffer overflows. Use a size limitation in format specification (CWE-120, CWE-20).\n\n";
constructor() {
super("fscanf");
}
check($node) {
if (!($node instanceof Call) || $node.name !== "fscanf") {
return;
}
return new CheckResult(this.name, $node, this.advice);
}
}
//# sourceMappingURL=FscanfChecker.js.map