CWARN.FUNCADDR
Function address is used instead of a call to function
The CWARN.FUNCADDR checker finds instances in which a function address is used unexpectedly as a logical condition or as an operand in an arithmetic or logical operation. Typically, these situations occur when the designer intended a call to the function and round brackets were lost.
Vulnerability and risk
In these cases, the compiler will take the address instead of calling the function. The address is never zero, and therefore always true, causing unexpected program behavior.
Vulnerable code example
Copy
int get0() { return 0; }
void test(Boolean b) {
if (get0)
return;
}
In this example, Klocwork flags line 3, in which an intended call to get0() becomes a function address used as a condition.