C analysis missing detection of out of bound memory access

SonarQube Server / Community Build
,
1

Sonarqube version : 7.4.0.18908
SonarCFamily : 6.3 ( build 11371 )

An out of bound memory access should be detected at 'tt.val[2].val = 0;"

This is detected for a simple array - but not when structures are used.

typedef struct
{
int val;
} testElement;

typedef struct
{
testElement val[2];
} testStruct;

int main(int argc, char** argv)
{
testStruct tt = {};
tt.val[2].val = 0;
return tt.val[0].val;
}

3

Hello @SteveB,

Welcome to the community!
Thank you for reporting this false-negative. We are working on fixing it. You can watch this ticket to be notified when this issue is fixed.

Thanks,
Abbas