HARDCODED.DNS : ハードコードされたDNS名

JavaScript is not currently enabled, but is required for full CodeSonar manual search and browse functionality.

If you are viewing this file in your hub's Web GUI, enable JavaScript in your browser: you will also need it for GUI functionality.

If you opened this file directly from disk, your browser may be directly suppressing JavaScript functionality: certain browsers perform this suppression on local files (but not files delivered by web servers) for security reasons.

If you access the manual through the hub's Web GUI, the functionality will not be suppressed because the hub is a web server.
Alternatively, your browser may allow you to explicitly disable the security setting that suppresses functionality. See the CodeSonar FAQ for more information.

CodeSonar^® 9.2p0

CONFIDENTIAL

CodeSecure Inc

HARDCODED.DNS : ハードコードされたDNS名

要旨

コード内の文字列リテラルがハードコードされた DNS 名である可能性があります。

プロパティ

CWE

CWE:506

Embedded Malicious Code

CERT-C

CERT-C:MSC41-C

Never hard code sensitive information

DISA-6r1

DISA-6r1:V-222612

The application must not be vulnerable to overflow attacks.

DISA-5r3

DISA-5r3:V-70277

The application must not be vulnerable to overflow attacks.

DISA-4r3

DISA-4r3:V-70277

The application must not be vulnerable to overflow attacks.

DISA-3r10

DISA-3r10:V-16804

The designer will ensure the application does not rely solely on a resource name to control access to a resource.

OWASP-2017

OWASP-2017:A6

Security misconfiguration

OWASP-2021

OWASP-2021:A5

Security misconfiguration

OWASP-2021:A8

Software and data integrity failures

OWASP-2025

OWASP-2025:A02

Security Misconfiguration

OWASP-2025:A08

Software or Data Integrity Failures

例

void connect_to_server(int port)
{
    char *servername = "www.example.com"; /* 'Hardcoded DNS Name' warning issued here */ 
    /* ... */          
}

注釈

このクラスのワーニングは、言語実装詳細を反映した #File_Initialization 関数内でレポートされるかもしれません。

関連のある設定ファイルパラメータ

設定ファイルの以下のパラメータがこのワーニングクラスのチェックに影響します。