sqc 0.4.13

Software Code Quality - CERT C compliance checker
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

/*
 * Rule: WIN05-C
 * Status: FAIL - RegCreateKeyExA with HKEY_LOCAL_MACHINE
 */

typedef void *HKEY;
typedef unsigned long DWORD;
typedef long LONG;
typedef const char *LPCSTR;
typedef void *LPSECURITY_ATTRIBUTES;
typedef HKEY *PHKEY;

#define HKEY_LOCAL_MACHINE ((HKEY)(unsigned long)0x80000002)

LONG RegCreateKeyExA(HKEY, LPCSTR, DWORD, LPSTR, DWORD,
    DWORD, LPSECURITY_ATTRIBUTES, PHKEY, DWORD*);

void f(void) {
    HKEY key;
    RegCreateKeyExA(
        HKEY_LOCAL_MACHINE,  /* VIOLATION: uses HKLM, requires admin */
        "Software\\MyApp",
        0, 0, 0, 0, 0, &key, 0
    );
}