Amazon QDetector Library Sign in to Amazon Q

Detector Library

Tag: data-integrityFeedback

Q

Detector Library

C detectors (34/34)

Logging of sensitive information Insecure Use Of Chroot Deadlock And Lock Inconsistency Unsafe File Extension OS command injection Incorrect Use Of Free Use Of Uninitialized Variable Insecure Use strcat fn SQL injection Bitwise Operator On Signed Operand Insecure use gets fn Random fd exhaustion Redundant Free Usage Insecure Use Memset Divide By Zero.Return Stack Address Unchecked Return Value Incorrect Format Specifier Unhandled Expression Result Path traversal Improper Input Validation Out Of Bounds Read Integer Overflow Insecure use strtok function Improper size of a memory buffer incomplete-cleanup Null pointer dereference Insecure Temporary File Or Directory Insecure Buffer Access Incorrect Use Ato Fn Loose File Permissions Exposure of Sensitive Information Out-of-bounds Write String Equality

Tag: data-integrity

String Equality

Use strcmp() or strncmp() instead of == and != for character content comparison.