2344
integers to floating point for floating point operations CWE-686 FLP31-C Do not call functions
expecting real values with complex values
References
[REF-597]Robert C. Seacord. "The CERT C Secure Coding Standard". 1st Edition. 2008 October
4. Addison-Wesley Professional.
Category-740: CERT C Secure Coding Standard (2008) Chapter 7 - Arrays
(ARR)
Category ID : 740
Summary
Weaknesses in this category are related to the rules and recommendations in the Arrays (ARR)
chapter of the CERT C Secure Coding Standard (2008).
Membership
Nature Type ID Name Page
MemberOf 734 Weaknesses Addressed by the CERT C Secure Coding
Standard (2008)
734 2560
HasMember 119 Improper Restriction of Operations within the Bounds of
a Memory Buffer
734 293
HasMember 129 Improper Validation of Array Index 734 341
HasMember 467 Use of sizeof() on a Pointer Type 734 1110
HasMember 469 Use of Pointer Subtraction to Determine Size 734 1115
HasMember 665 Improper Initialization 734 1456
HasMember 805 Buffer Access with Incorrect Length Value 734 1702
Notes
Relationship
In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped
to the following CWE IDs: CWE-119 ARR00-C Understand how arrays work CWE-119 ARR33-
C Guarantee that copies are made into storage of sufficient size CWE-119 ARR34-C Ensure
that array types in expressions are compatible CWE-119 ARR35-C Do not allow loops to iterate
beyond the end of an array CWE-129 ARR00-C Understand how arrays work CWE-129 ARR30-
C Guarantee that array indices are within the valid range CWE-129 ARR38-C Do not add or
subtract an integer to a pointer if the resulting value does not refer to a valid array element
CWE-467 ARR01-C Do not apply the sizeof operator to a pointer when taking the size of an
array CWE-469 ARR36-C Do not subtract or compare two pointers that do not refer to the same
array CWE-469 ARR37-C Do not add or subtract an integer to a pointer to a non-array object
CWE-665 ARR02-C Explicitly specify array bounds, even if implicitly defined by an initializer
CWE-805 ARR33-C Guarantee that copies are made into storage of sufficient size
References
[REF-597]Robert C. Seacord. "The CERT C Secure Coding Standard". 1st Edition. 2008 October
4. Addison-Wesley Professional.
Category-741: CERT C Secure Coding Standard (2008) Chapter 8 - Characters
and Strings (STR)
Category ID : 741
CWE Version 4.14
CWE-742: CERT C Secure Coding Standard (2008) Chapter 9 - Memory Management (MEM)
CWE-742: CERT C Secure Coding Standard
(2008) Chapter 9 - Memory Management (MEM)