Ignoring Automatic Initialization for Code Analysis
Reading uninitialized memory is one of the major sources of security vulnerabilities in C and C++ programs. Microsoft developed many tools to find such errors including compiler warnings, static analysis checks, and more recently: code instrumentation. For a more detailed overview of uninitialized memory related vulnerabilities and mitigations ple...