CodeAnt AI home pagelight logodark logo
  • Dashboard
  • Dashboard
  • Documentation
  • Demo Call with CEO
  • Blog
  • Slack
    • Get Started
    • CodeAnt AI
    • Setup
    • Control Center
    • Pull Request Review
    • IDE
    • Compliance
    • Anti-Patterns
    • Code Governance
    • Infrastructure Security Database
    • Application Security Database
      • Apex
      • Bash
      • C
      • Clojure
      • Cpp
        • Lang
          • Correctness
          • Security
            • Containers
            • Crypto
            • Filesystem
            • Format-string
            • Ldap
            • Libraries
            • Memory
            • Misc
            • Rng
            • Sql
            • Strings
              • Alloc-strlen
              • Missing-nul-cpp-string-memcpy
              • Narrow-to-wide-string-mismatch
              • Readlink-null-terminator
              • Return-c-str
              • Snprintf-return-value-length
              • Snprintf-return-value-snprintf
              • Snprintf-source-size
              • Std-string-npos
              • String-buffer-overflow
              • String-view-data-null-terminator
              • String-view-temporary-string
              • Unbounded-copy-to-stack-buffer
                • Unbounded copy to stack buffer
              • Wide-to-narrow-string-mismatch
            • System-command
            • Uri
            • Use-after-free
        • Libxml2
      • Csharp
      • Dockerfile
      • Elixir
      • Fingerprints
      • Generic
      • Go
      • Html
      • Java
      • Javascript
      • Json
      • Kotlin
      • Ocaml
      • Php
      • Problem-based-packs
      • Python
      • Ruby
      • Rust
      • Scala
      • Solidity
      • Swift
      • Terraform
      • Typescript
      • Yaml
    Unbounded-copy-to-stack-buffer

    Unbounded copy to stack buffer

    unbounded-copy-to-stack-buffer

    The function $FUN does not impose any size limitation to what it writes to $BUF. That may lead to a stack buffer overflow if there is no validation on the size of the input.
    Likelihood: LOW
    Confidence: MEDIUM
    CWE:
    - CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’)

    String view temporary stringWide to narrow string mismatch
    twitterlinkedin
    Powered by Mintlify
    Assistant
    Responses are generated using AI and may contain mistakes.