2343
In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped
to the following CWE IDs: CWE-20 INT06-C Use strtol() or a related function to convert a string
token to an integer CWE-129 INT32-C Ensure that operations on signed integers do not result
in overflow CWE-190 INT03-C Use a secure integer library CWE-190 INT30-C Ensure that
unsigned integer operations do not wrap CWE-190 INT32-C Ensure that operations on signed
integers do not result in overflow CWE-190 INT35-C Evaluate integer expressions in a larger size
before comparing or assigning to that size CWE-192 INT02-C Understand integer conversion
rules CWE-192 INT05-C Do not use input functions to convert character data if they cannot
handle all possible inputs CWE-192 INT31-C Ensure that integer conversions do not result in lost
or misinterpreted data CWE-197 INT02-C Understand integer conversion rules CWE-197 INT05-
C Do not use input functions to convert character data if they cannot handle all possible inputs
CWE-197 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data
CWE-369 INT33-C Ensure that division and modulo operations do not result in divide-by-zero
errors CWE-466 INT11-C Take care when converting from pointer to integer or integer to pointer
CWE-587 INT11-C Take care when converting from pointer to integer or integer to pointer
CWE-606 INT03-C Use a secure integer library CWE-676 INT06-C Use strtol() or a related
function to convert a string token to an integer CWE-681 INT15-C Use intmax_t or uintmax_t
for formatted IO on programmer-defined integer types CWE-681 INT31-C Ensure that integer
conversions do not result in lost or misinterpreted data CWE-681 INT35-C Evaluate integer
expressions in a larger size before comparing or assigning to that size CWE-682 INT07-C Use
only explicitly signed or unsigned char type for numeric values CWE-682 INT13-C Use bitwise
operators only on unsigned operands
References
[REF-597]Robert C. Seacord. "The CERT C Secure Coding Standard". 1st Edition. 2008 October
4. Addison-Wesley Professional.
Category-739: CERT C Secure Coding Standard (2008) Chapter 6 - Floating
Point (FLP)
Category ID : 739
Summary
Weaknesses in this category are related to the rules and recommendations in the Floating Point
(FLP) chapter of the CERT C Secure Coding Standard (2008).
Membership
Nature Type ID Name Page
MemberOf 734 Weaknesses Addressed by the CERT C Secure Coding
Standard (2008)
734 2560
HasMember 369 Divide By Zero 734 913
HasMember 681 Incorrect Conversion between Numeric Types 734 1495
HasMember 682 Incorrect Calculation 734 1499
HasMember 686 Function Call With Incorrect Argument Type 734 1508
Notes
Relationship
In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped
to the following CWE IDs: CWE-369 FLP03-C Detect and handle floating point errors CWE-681
FLP33-C Convert integers to floating point for floating point operations CWE-681 FLP34-C
Ensure that floating point conversions are within range of the new type CWE-682 FLP32-
C Prevent or detect domain and range errors in math functions CWE-682 FLP33-C Convert
CWE Version 4.14
CWE-740: CERT C Secure Coding Standard (2008) Chapter 7 - Arrays (ARR)
CWE-740: CERT C Secure Coding Standard (2008) Chapter 7 - Arrays (ARR)