{"@ID": "737", "@Name": "CERT C Secure Coding Standard (2008) Chapter 4 - Expressions (EXP)", "@Status": "Obsolete", "Summary": "Weaknesses in this category are related to the rules and recommendations in the Expressions (EXP) chapter of the CERT C Secure Coding Standard (2008).", "Relationships": {"Has_Member": [{"@CWE_ID": "467", "@View_ID": "734"}, {"@CWE_ID": "468", "@View_ID": "734"}, {"@CWE_ID": "476", "@View_ID": "734"}, {"@CWE_ID": "628", "@View_ID": "734"}, {"@CWE_ID": "704", "@View_ID": "734"}, {"@CWE_ID": "783", "@View_ID": "734"}]}, "References": {"Reference": {"@External_Reference_ID": "REF-597"}}, "Mapping_Notes": {"Usage": "Prohibited", "Rationale": "This entry is a Grouping. Using groupings for mapping has been discouraged since 2019. They are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.", "Comments": "See member weaknesses of this category.", "Reasons": {"Reason": {"@Type": "Grouping"}}}, "Notes": {"Note": {"@Type": "Relationship", "xhtml:p": "In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:", "xhtml:ul": {"xhtml:li": ["CWE-467 EXP01-C Do not take the size of a pointer to determine the size of the pointed-to type", "CWE-468 EXP08-C Ensure pointer arithmetic is used correctly", "CWE-476 EXP34-C Ensure a null pointer is not dereferenced", "CWE-628 EXP37-C Call functions with the arguments intended by the API", "CWE-704 EXP05-C Do not cast away a const qualification", "CWE-783 EXP00-C Use parentheses for precedence of operation"]}, "#text_blocks": ["In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:", "CWE-467 EXP01-C Do not take the size of a pointer to determine the size of the pointed-to type", "CWE-468 EXP08-C Ensure pointer arithmetic is used correctly", "CWE-476 EXP34-C Ensure a null pointer is not dereferenced", "CWE-628 EXP37-C Call functions with the arguments intended by the API", "CWE-704 EXP05-C Do not cast away a const qualification", "CWE-783 EXP00-C Use parentheses for precedence of operation"]}}, "Content_History": {"Submission": {"Submission_Name": "CWE Content Team", "Submission_Organization": "MITRE", "Submission_Date": "2008-11-24", "Submission_Version": "1.1", "Submission_ReleaseDate": "2008-11-24"}, "Modification": [{"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2009-07-27", "Modification_Version": "1.5", "Modification_ReleaseDate": "2009-07-27", "Modification_Comment": "updated Relationships"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2017-11-08", "Modification_Version": "3.0", "Modification_ReleaseDate": "2017-11-08", "Modification_Comment": "updated Description, Name, Relationship_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2019-01-03", "Modification_Version": "3.2", "Modification_ReleaseDate": "2019-01-03", "Modification_Comment": "updated Description, Name, References"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2023-04-27", "Modification_Version": "4.11", "Modification_ReleaseDate": "2023-04-27", "Modification_Comment": "updated Mapping_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2023-06-29", "Modification_Version": "4.12", "Modification_ReleaseDate": "2023-06-29", "Modification_Comment": "updated Mapping_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2026-10-28", "Modification_Version": "5.0", "Modification_ReleaseDate": "2026-10-28", "Modification_Comment": "updated Mapping_Notes, Type"}], "Previous_Entry_Name": [{"@Date": "2017-11-08", "#text": "CERT C Secure Coding Section 03 - Expressions (EXP)"}, {"@Date": "2019-01-03", "#text": "CERT C Secure Coding (2008 Version) Section 03 - Expressions (EXP)"}]}, "entry_type": "Grouping"}