Checkers:ABV.UNICODE.SELF MAP

From current

Reference > C/C++ checkers > ABV.UNICODE.SELF MAP

Buffer overflow—array index out of bounds in failed mapping function

ABV.UNICODE.SELF_MAP checks for buffer overrun conditions caused in failed MultiByteToWideChar and WideCharToMultiByte mapping functions. Typically, the checker detects an error condition when the source and destination pointers of the mapping function are the same.

For more information on the MultiByteToWideChar and WideCharToMultiByte mapping functions, see the MSDN website.

Vulnerability and risk

Using these mapping functions incorrectly can compromise the security of an application by causing a buffer overflow. To avoid this potential condition, it's important to specify a buffer size that is appropriate for the data type the buffer receives.

For more information on vulnerability and risk in buffer overflows, see Understanding buffer overflows.

Code examples

Vulnerable code example

1  int
2  foo(void *src,  int size) {
3     WideCharToMultiByte(CP_ACP, 0, (wchar_t)src, -1, src, size, 0, 0);
4     MultiByteToWideChar(CP_ACP, 0, src, -1, src, 30);  
5  }

Klocwork produces a message for both lines 3 and 4 in this example, indicating that the source and destination pointers must not be the same. The checker has found failed WideCharToMultiByte and MultiByteToWideChar mapping functions that have caused a buffer overrun condition.

Related checkers

External guidance

Extension

This checker can be extended through the Klocwork knowledge base. See Tuning C/C++ analysis for more information.

Retrieved from "http://www.klocwork.com/products/documentation/current/Checkers:ABV.UNICODE.SELF_MAP"