432
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 730 OWASP Top Ten 2004 Category A9 - Denial of Service 711 2339
MemberOf 741 CERT C Secure Coding Standard (2008) Chapter 8 -
Characters and Strings (STR)
734 2344
MemberOf 748 CERT C Secure Coding Standard (2008) Appendix -
POSIX (POS)
734 2351
MemberOf 875 CERT C++ Secure Coding Section 07 - Characters and
Strings (STR)
868 2376
MemberOf 884 CWE Cross-section 884 2567
MemberOf 973 SFP Secondary Cluster: Improper NULL Termination 888 2406
MemberOf 1161 SEI CERT C Coding Standard - Guidelines 07.
Characters and Strings (STR)
1154 2458
MemberOf 1171 SEI CERT C Coding Standard - Guidelines 50. POSIX
(POS)
1154 2463
MemberOf 1306 CISQ Quality Measures - Reliability 1305 2483
MemberOf 1340 CISQ Data Protection Measures 1340 2590
MemberOf 1407 Comprehensive Categorization: Improper Neutralization 1400 2532
Notes
Relationship
Factors: this is usually resultant from other weaknesses such as off-by-one errors, but it can be
primary to boundary condition violations such as buffer overflows. In buffer overflows, it can act
as an expander for assumed-immutable data.
Relationship
Overlaps missing input terminator.
Applicable Platform
Conceptually, this does not just apply to the C language; any language or representation that
involves a terminator could have this type of problem.
Maintenance
As currently described, this entry is more like a category than a weakness.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Improper Null Termination
7 Pernicious Kingdoms String Termination Error
CLASP Miscalculated null termination
OWASP Top Ten 2004 A9 CWE More Specific Denial of Service
CERT C Secure Coding POS30-
C
CWE More
Abstract
Use the readlink() function properly
CERT C Secure Coding STR03-C Do not inadvertently truncate a nullterminated
byte string
CERT C Secure Coding STR32-C Exact Do not pass a non-null-terminated
character sequence to a library function
that expects a string
Software Fault Patterns SFP11 Improper Null Termination
CWE Version 4.14
CWE-172: Encoding Error
CWE-172: Encoding Error