{"@ID": "738", "@Name": "CERT C Secure Coding Standard (2008) Chapter 5 - Integers (INT)", "@Status": "Obsolete", "Summary": "Weaknesses in this category are related to the rules and recommendations in the Integers (INT) chapter of the CERT C Secure Coding Standard (2008).", "Relationships": {"Has_Member": [{"@CWE_ID": "129", "@View_ID": "734"}, {"@CWE_ID": "190", "@View_ID": "734"}, {"@CWE_ID": "192", "@View_ID": "734"}, {"@CWE_ID": "197", "@View_ID": "734"}, {"@CWE_ID": "20", "@View_ID": "734"}, {"@CWE_ID": "369", "@View_ID": "734"}, {"@CWE_ID": "466", "@View_ID": "734"}, {"@CWE_ID": "587", "@View_ID": "734"}, {"@CWE_ID": "606", "@View_ID": "734"}, {"@CWE_ID": "676", "@View_ID": "734"}, {"@CWE_ID": "681", "@View_ID": "734"}, {"@CWE_ID": "682", "@View_ID": "734"}]}, "References": {"Reference": {"@External_Reference_ID": "REF-597"}}, "Mapping_Notes": {"Usage": "Prohibited", "Rationale": "This entry is a Grouping. Using groupings for mapping has been discouraged since 2019. They are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.", "Comments": "See member weaknesses of this category.", "Reasons": {"Reason": {"@Type": "Grouping"}}}, "Notes": {"Note": {"@Type": "Relationship", "xhtml:p": "In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:", "xhtml:ul": {"xhtml:li": ["CWE-20 INT06-C Use strtol() or a related function to convert a string token to an integer", "CWE-129 INT32-C Ensure that operations on signed integers do not result in overflow", "CWE-190 INT03-C Use a secure integer library", "CWE-190 INT30-C Ensure that unsigned integer operations do not wrap", "CWE-190 INT32-C Ensure that operations on signed integers do not result in overflow", "CWE-190 INT35-C Evaluate integer expressions in a larger size before comparing or assigning to that size", "CWE-192 INT02-C Understand integer conversion rules", "CWE-192 INT05-C Do not use input functions to convert character data if they cannot handle all possible inputs", "CWE-192 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data", "CWE-197 INT02-C Understand integer conversion rules", "CWE-197 INT05-C Do not use input functions to convert character data if they cannot handle all possible inputs", "CWE-197 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data", "CWE-369 INT33-C Ensure that division and modulo operations do not result in divide-by-zero errors", "CWE-466 INT11-C Take care when converting from pointer to integer or integer to pointer", "CWE-587 INT11-C Take care when converting from pointer to integer or integer to pointer", "CWE-606 INT03-C Use a secure integer library", "CWE-676 INT06-C Use strtol() or a related function to convert a string token to an integer", "CWE-681 INT15-C Use intmax_t or uintmax_t for formatted IO on programmer-defined integer types", "CWE-681 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data", "CWE-681 INT35-C Evaluate integer expressions in a larger size before comparing or assigning to that size", "CWE-682 INT07-C Use only explicitly signed or unsigned char type for numeric values", "CWE-682 INT13-C Use bitwise operators only on unsigned operands"]}, "#text_blocks": ["In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:", "CWE-20 INT06-C Use strtol() or a related function to convert a string token to an integer", "CWE-129 INT32-C Ensure that operations on signed integers do not result in overflow", "CWE-190 INT03-C Use a secure integer library", "CWE-190 INT30-C Ensure that unsigned integer operations do not wrap", "CWE-190 INT32-C Ensure that operations on signed integers do not result in overflow", "CWE-190 INT35-C Evaluate integer expressions in a larger size before comparing or assigning to that size", "CWE-192 INT02-C Understand integer conversion rules", "CWE-192 INT05-C Do not use input functions to convert character data if they cannot handle all possible inputs", "CWE-192 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data", "CWE-197 INT02-C Understand integer conversion rules", "CWE-197 INT05-C Do not use input functions to convert character data if they cannot handle all possible inputs", "CWE-197 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data", "CWE-369 INT33-C Ensure that division and modulo operations do not result in divide-by-zero errors", "CWE-466 INT11-C Take care when converting from pointer to integer or integer to pointer", "CWE-587 INT11-C Take care when converting from pointer to integer or integer to pointer", "CWE-606 INT03-C Use a secure integer library", "CWE-676 INT06-C Use strtol() or a related function to convert a string token to an integer", "CWE-681 INT15-C Use intmax_t or uintmax_t for formatted IO on programmer-defined integer types", "CWE-681 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data", "CWE-681 INT35-C Evaluate integer expressions in a larger size before comparing or assigning to that size", "CWE-682 INT07-C Use only explicitly signed or unsigned char type for numeric values", "CWE-682 INT13-C Use bitwise operators only on unsigned operands"]}}, "Content_History": {"Submission": {"Submission_Name": "CWE Content Team", "Submission_Organization": "MITRE", "Submission_Date": "2008-11-24", "Submission_Version": "1.1", "Submission_ReleaseDate": "2008-11-24"}, "Modification": [{"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2017-11-08", "Modification_Version": "3.0", "Modification_ReleaseDate": "2017-11-08", "Modification_Comment": "updated Description, Name, Relationship_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2019-01-03", "Modification_Version": "3.2", "Modification_ReleaseDate": "2019-01-03", "Modification_Comment": "updated Description, Name, References"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2023-04-27", "Modification_Version": "4.11", "Modification_ReleaseDate": "2023-04-27", "Modification_Comment": "updated Mapping_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2023-06-29", "Modification_Version": "4.12", "Modification_ReleaseDate": "2023-06-29", "Modification_Comment": "updated Mapping_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2026-10-28", "Modification_Version": "5.0", "Modification_ReleaseDate": "2026-10-28", "Modification_Comment": "updated Mapping_Notes, Type"}], "Previous_Entry_Name": [{"@Date": "2017-11-08", "#text": "CERT C Secure Coding Section 04 - Integers (INT)"}, {"@Date": "2019-01-03", "#text": "CERT C Secure Coding (2008 Version) Section 04 - Integers (INT)"}]}, "entry_type": "Grouping"}