hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 20:25:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

C++: Address doc review comments

Browse Source
This commit is contained in:
Jonas Jensen
2019-01-17 12:01:49 +01:00
parent 9751a91087
commit 2478d440c2
1 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
cpp/ql/src/Likely Bugs/Likely Typos/UsingStrcpyAsBoolean.qhelp
View File

@@ -13,15 +13,15 @@ context.</p>
<p>The string copy functions that the rule takes into consideration are:</p>
<ul>
<li>strcpy</li>
<li>wcscpy</li>
<li>_mbscpy</li>
<li>strncpy</li>
<li>_strncpy_l</li>
<li>wcsncpy</li>
<li>_wcsncpy_l</li>
<li>_mbsncpy</li>
<li>_mbsncpy_l</li>
<li><code>strcpy</code></li>
<li><code>wcscpy</code></li>
<li><code>_mbscpy</code></li>
<li><code>strncpy</code></li>
<li><code>_strncpy_l</code></li>
<li><code>wcsncpy</code></li>
<li><code>_wcsncpy_l</code></li>
<li><code>_mbsncpy</code></li>
<li><code>_mbsncpy_l</code></li>
</ul>
<p>NOTE: It is highly recommended to consider using a more secure version of string manipulation functions such as as <code>strcpy_s</code>.</p>
@@ -37,7 +37,7 @@ context.</p>
</example>
<references>
<li>Microsoft Code Analysis for C/C++: <a href="https://docs.microsoft.com/en-us/previous-versions/visualstudio/visual-studio-2012/ccf4h9w8(v=vs.110)">C6324</a></li>
<li>Microsoft Code Analysis for C/C++ Warnings: <a href="https://docs.microsoft.com/en-us/previous-versions/visualstudio/visual-studio-2012/ccf4h9w8(v=vs.110)">C6324</a></li>
<li>Microsoft C library reference: <a href="https://docs.microsoft.com/en-us/cpp/c-runtime-library/reference/strcpy-wcscpy-mbscpy">strcpy, wcscpy, _mbscpy</a></li>
<li>US-CERT: <a href="https://www.us-cert.gov/bsi/articles/knowledge/coding-practices/strcpy_s-and-strcat_s">strcpy_s() and strcat_s()</a></li>