Amazon QDetector Library Sign in to Amazon Q

Amazon Q

Detector Library

C detectors (38/38)

Logging of sensitive information Insecure Use Of Chroot Deadlock And Lock Inconsistency Unsafe File Extension Numeric Truncation Error OS command injection Incorrect Use Of Free Insecure Use strcat fn SQL injection Bitwise Operator On Signed Operand Insecure use gets fn Random fd exhaustion Hardcoded Credentials Redundant Free Usage Incorrect default Permissions Insecure Use Memset Divide By Zero.Return Stack Address Unchecked Return Value Incorrect Format Specifier Path traversal Improper Input Validation Improper Null Termination Out Of Bounds Read Integer Overflow Insecure use strtok function Improper size of a memory buffer Unused Assigned Variables incomplete-cleanup Null pointer dereference Insecure Temporary File Or Directory Insecure Buffer Access Incorrect Use Ato Fn Loose File Permissions Cross-site Scripting.Exposure of Sensitive Information Out-of-bounds Write String Equality

Improper Null Termination High

Improper use of string manipulation functions (memset, strncpy, etc) without ensuring null termination can lead to buffer overflows and string handling errors in later part of code. This occurs when a function initializes or modifies a buffer without allocating space for null termination or misses null terminator. Such oversights may cause subsequent string operations to read beyond buffer bounds, resulting in undefined behavior, data corruption, or security vulnerabilities.

Detector ID

c/improper-null-termination@v1.0

Category

Common Weakness Enumeration (CWE)

Tags

# null-termination