CWE-741

This entry is a Grouping. Using groupings for mapping has been discouraged since 2019. They are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.

See member weaknesses of this category.

Relationship

In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:

CWE-78 STR02-C Sanitize data passed to complex subsystems

CWE-88 STR02-C Sanitize data passed to complex subsystems

CWE-119 STR31-C Guarantee that storage for strings has sufficient space for character data and the null terminator

CWE-119 STR32-C Null-terminate byte strings as required

CWE-119 STR33-C Size wide character strings correctly

CWE-120 STR35-C Do not copy data from an unbounded source to a fixed-length array

CWE-135 STR33-C Size wide character strings correctly

CWE-170 STR03-C Do not inadvertently truncate a null-terminated byte string

CWE-170 STR32-C Null-terminate byte strings as required

CWE-193 STR31-C Guarantee that storage for strings has sufficient space for character data and the null terminator

CWE-464 STR03-C Do not inadvertently truncate a null-terminated byte string

CWE-464 STR06-C Do not assume that strtok() leaves the parse string unchanged

CWE-686 STR37-C Arguments to character handling functions must be representable as an unsigned char

CWE-704 STR34-C Cast characters to unsigned types before converting to larger integer sizes

CWE-704 STR37-C Arguments to character handling functions must be representable as an unsigned char