[RULE REQUEST] Dwarf Compile Using Current Dialects - Githubissues

microsoft / binskim

A binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats

Other

769 stars 156 forks source link

[RULE REQUEST] Dwarf Compile Using Current Dialects #415

Open shaopeng-gh opened 3 years ago

shaopeng-gh commented 3 years ago

Rule metadata

Id: BA3012
Name: DwarfCompileUsingCurrentDialects

Rule descriptions

Full: The '/std' setting enables supported C and C++ language features from the specified version of the C or C++ language standard. Compile using current dialects enables current standard-specific features and behavior.

Platform & applicability

Platform: Unix
Applicable to: *nix binaries
Not applicable to: Windows

User-facing strings

Fail: '{0}' was not compiled with current dialects. Compile using current dialects enables current standard-specific features and behavior. To resolve this problem, compiling with the compiler flags /std with version 17 or later, e.g. '/std:c++17' for C++ and '/std:c17' for C.
Pass: '{0}' was compiled with current dialects. Compile using current dialects enables current standard-specific features and behavior.

Links/Additional Information

https://gcc.gnu.org/onlinedocs/gcc/C-Dialect-Options.html https://gcc.gnu.org/onlinedocs/gcc/Standards.html

Implementation Notes

both /std:c and /std:c++ support more than 1 value passed. Compiler will choose the correct one and the finial result is in the 2nd value of the Producer Flag.

How to resolve

/std:c17 or /std:c++17
or using version later than 17

sylveon commented 3 years ago

I'm not sure how this is security-relevant?