In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs: CWE-20 INT06-C Use strtol() or a related function to convert a string token to an integer CWE-129 INT32-C Ensure that operations on signed integers do not result in overflow CWE-190 INT03-C Use a secure integer library CWE-190 INT30-C Ensure that unsigned integer operations do not wrap CWE-190 INT32-C Ensure that operations on signed integers do not result in overflow CWE-190 INT35-C Evaluate integer expressions in a larger size before comparing or assigning to that size CWE-192 INT02-C Understand integer conversion rules CWE-192 INT05-C Do not use input functions to convert character data if they cannot handle all possible inputs CWE-192 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data CWE-197 INT02-C Understand integer conversion rules CWE-197 INT05-C Do not use input functions to convert character data if they cannot handle all possible inputs CWE-197 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data CWE-369 INT33-C Ensure that division and modulo operations do not result in divide-by-zero errors CWE-466 INT11-C Take care when converting from pointer to integer or integer to pointer CWE-587 INT11-C Take care when converting from pointer to integer or integer to pointer CWE-606 INT03-C Use a secure integer library CWE-676 INT06-C Use strtol() or a related function to convert a string token to an integer CWE-681 INT15-C Use intmax_t or uintmax_t for formatted IO on programmer-defined integer types CWE-681 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data CWE-681 INT35-C Evaluate integer expressions in a larger size before comparing or assigning to that size CWE-682 INT07-C Use only explicitly signed or unsigned char type for numeric values CWE-682 INT13-C Use bitwise operators only on unsigned operands

No records found