Skip to content

Commit 1f7db31

Browse files
Update docs/code-quality/c26831.md
Co-authored-by: dmitrykobets-msft <89153909+dmitrykobets-msft@users.noreply.github.com>
1 parent 5c0c49d commit 1f7db31

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/code-quality/c26831.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ void foo(int i, int j)
2525
2626
In case `i+j` overflows, `SmallAlloc` returns a buffer that is smaller than expected. As a result, future accesses to the buffer like `p[i]` are out of bounds. These code patterns can result in remote code execution vulnerabilities.
2727
28-
Common allocation functions like `new`, `malloc`, and `VirtalAlloc` are recognized. The check also tries to recognize custom allocator functions by case insensitive search for the `alloc` substring in the function name.
28+
Common allocation functions like `new`, `malloc`, and `VirtualAlloc` are recognized. The check also tries to recognize custom allocator functions by case insensitive search for the `alloc` substring in the function name.
2929
3030
Our analysis engine's numerical solver have some limitations reasoning about numerical overflows. As a result, this check is using some heuristics and sometimes fails to recognize that certain checks can prevent overflows.
3131
Usually, checking for a reasonable bound on the allocation should work.

0 commit comments

Comments
 (0)