VOIDRET

Void function returns value

The VOIDRET checker finds functions declared as void that return a value.

Vulnerability and risk

This issue is typically style-related, but may indicate a logic problem in the code.

Vulnerable code example

1
2
3
4
5
6
7
  class A{
     void foo();
  };
  void A::foo()
  {
    return 0;
  }

Klocwork flags line 6, in which a value is returned from void function foo().

External guidance

• CWE-394: Unexpected Status Code or Return Value

Security training

Application security training materials provided by Secure Code Warrior.

• Insufficient Validation Training Video - Test your skills with a training example