COBOL static code analysis

Filtered: 14 rules found

cwe

Impact

Clean code attribute

Limited dependence should be placed on operator precedence
Code Smell
Delivering code in production with debug features activated is security-sensitive
Security Hotspot
Strings should only be moved to variables large enough to hold them without truncation
Bug
Boolean expressions should not be gratuitous
Code Smell
Conditionally executed code should be reachable
Bug
Numbers should only be moved to variables large enough to hold them without truncation
Bug
Alphanumeric values should not be moved to numeric fields
Bug
Open files should be closed explicitly
Code Smell
Explicitly opened cursors should be closed
Bug
SQL statements should not contain dynamic clauses
Security Hotspot
"EVALUATE" structures should end with "WHEN OTHERS" clauses
Code Smell
"DISPLAY" should not be used
Vulnerability
Track uses of "TODO" tags
Code Smell
Track uses of "FIXME" tags
Code Smell

Strings should only be moved to variables large enough to hold them without truncation

intentionality - complete

reliability

Bug

Moving a large string into a small field will result in data truncation with data lost from the right side of the string.

01 ALPHA   PIC X(4).
*> ...

    MOVE "Now is the time" TO ALPHA *> Noncompliant. Becomes "Now "

01 ALPHA   PIC X(15).
*> ...

    MOVE "Now is the time" TO ALPHA

Available In: