341
Nature Type ID Name Page
MemberOf 998 SFP Secondary Cluster: Glitch in Computation 888 2419
MemberOf 1408 Comprehensive Categorization: Incorrect Calculation 1400 2534
Notes
Relationship
The relationship between overflow and wrap-around needs to be examined more closely, since
several entries (including CWE-190) are closely related.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CLASP Wrap-around error
CERT C Secure Coding MEM07-
C
Ensure that the arguments to calloc(),
when multiplied, can be represented as
a size_t
Software Fault Patterns SFP1 Glitch in computation
Related Attack Patterns
CAPEC-ID Attack Pattern Name
92 Forced Integer Overflow
References
[REF-44]Michael Howard, David LeBlanc and John Viega. "24 Deadly Sins of Software Security".
McGraw-Hill. 2010.
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
[REF-18]Secure Software, Inc.. "The CLASP Application Security Process". 2005. < https://
cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf >.
CWE-129: Improper Validation of Array Index
Weakness ID : 129
Structure : Simple
Abstraction : Variant
Description
The product uses untrusted input when calculating or using an array index, but the product does
not validate or incorrectly validates the index to ensure the index references a valid position within
the array.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 1285 Improper Validation of Specified Index, Position, or Offset in
Input