C 缓冲区过读 if (index >= 0 && index < len)

C 缓冲区过读 if (index >= 0 && index < len)

CWE - CWE-126: Buffer Over-read (3.2) http://cwe.mitre.org/data/definitions/126.html

CWE - CWE-125: Out-of-bounds Read (3.2) http://cwe.mitre.org/data/definitions/125.html

#include <stdio.h>

int main () {

    int n[  ]; /* n is an array of 10 integers */

    int i,j;

    /* initialize elements of array n to 0 */

    for ( i = ; i < ; i++ ) {

        n[ i ] = i + ; /* set element at location i to i + 100 */

    }

    /* output each array element's value */

    for (j = ; j < ; j++ ) {

        printf("Element[%d] = %d\n", j, n[j] );

    }

    j=-;

    printf("Element[%d] = %d\n", j, n[j] );

    n[j]=-;

    printf("Element[%d] = %d\n", j, n[j] );

    j=;

    printf("Element[%d] = %d\n", j, n[j] );

    n[j]=-;

    printf("Element[%d] = %d\n", j, n[j] );

    return ;

}

Element[0] = 100
Element[1] = 101
Element[2] = 102
Element[3] = 103
Element[4] = 104
Element[5] = 105
Element[6] = 106
Element[7] = 107
Element[8] = 108
Element[9] = 109
Element[-2] = -2
Element[-20] = 2130567168
Element[30] = 1
Element[30] = -300
请按任意键继续. . .

TODO 内存泄露和指定下标值的解释