CWE-738

This entry is a Grouping. Using groupings for mapping has been discouraged since 2019. They are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.

See member weaknesses of this category.

Relationship

In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:

CWE-20 INT06-C Use strtol() or a related function to convert a string token to an integer

CWE-129 INT32-C Ensure that operations on signed integers do not result in overflow

CWE-190 INT03-C Use a secure integer library

CWE-190 INT30-C Ensure that unsigned integer operations do not wrap

CWE-190 INT32-C Ensure that operations on signed integers do not result in overflow

CWE-190 INT35-C Evaluate integer expressions in a larger size before comparing or assigning to that size

CWE-192 INT02-C Understand integer conversion rules

CWE-192 INT05-C Do not use input functions to convert character data if they cannot handle all possible inputs

CWE-192 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data

CWE-197 INT02-C Understand integer conversion rules

CWE-197 INT05-C Do not use input functions to convert character data if they cannot handle all possible inputs

CWE-197 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data

CWE-369 INT33-C Ensure that division and modulo operations do not result in divide-by-zero errors

CWE-466 INT11-C Take care when converting from pointer to integer or integer to pointer

CWE-587 INT11-C Take care when converting from pointer to integer or integer to pointer

CWE-606 INT03-C Use a secure integer library

CWE-676 INT06-C Use strtol() or a related function to convert a string token to an integer

CWE-681 INT15-C Use intmax_t or uintmax_t for formatted IO on programmer-defined integer types

CWE-681 INT31-C Ensure that integer conversions do not result in lost or misinterpreted data

CWE-681 INT35-C Evaluate integer expressions in a larger size before comparing or assigning to that size

CWE-682 INT07-C Use only explicitly signed or unsigned char type for numeric values

CWE-682 INT13-C Use bitwise operators only on unsigned operands