SV.BANNED.RECOMMENDED.PATHBanned path function callThere are a number of C/C++ functions that are not considered secure, and are known as 'banned' for that reason. These functions are:
The SV.BANNED family of checkers finds the use of any of the banned functions in code. The SV.BANNED.RECOMMENDED.PATH checker flags the use of insecure pathname manipulation functions. Vulnerability and riskMost of these prohibited functions were banned because they can lead to buffer overruns. As well as functions like strcpy and strcat, the banned list includes many of the corresponding 'n' functions, like strncpy and strncat. Although the 'n' functions are often recommended as replacements for their matching non-'n' functions, they are now considered to have issues with non-null termination of overflowed buffers and lack of error returns on overflows. Mitigation and preventionProhibiting the use of these banned APIs is a good way to remove a significant number of code vulnerabilities. The banned functions should be replaced with more secure versions, or the code should be re-designed to avoid the banned function entirely. To avoid security issues, it is recommended that you use equivalent safe functions for each category of function when the safe equivalents exist for your compiler. From time to time, Microsoft updates and deprecates functions, so always check the latest documentation at http://msdn.microsoft.com/. In some cases, there are no replacement functions, so a re-architecture of your code is advised. The replacement functions for the path manipulation functions are the safe CRT functions _makepath_s and _splitpath_s. (There are no StrSafe replacements.) As well as using safe replacement functions, it's important to check that the destination buffer is the appropriate size. An option is to consider is using the std::string template class rather than manipulating buffers directly. Related checkers
|