Weaknesses Addressed by the CERT C Secure Coding Standard (primary)734
Taxonomy Mappings
Mapped Taxonomy Name
Node ID
Fit
Mapped Node Name
7 Pernicious Kingdoms
Illegal Pointer Value
CERT C Secure Coding
INT11-C
Take care when converting from pointer to integer or integer
to pointer
White Box Definitions
A weakness where code path has:
1. end statement that returns an address associated with a buffer
where address is outside the buffer
2. start statement that computes a position into the buffer
Maintenance Notes
This entry should have a chaining relationship with CWE-119 instead of a
parent / child relationship, however the focus of this weakness does not map
cleanly to any existing entries in CWE. A new parent is being considered
which covers the more generic problem of incorrect return values. There is
also an abstract relationship to weaknesses in which one component sends
incorrect messages to another component; in this case, one routine is
sending an incorrect value to another.
Content History
Submissions
Submission Date
Submitter
Organization
Source
7 Pernicious Kingdoms
Externally Mined
Modifications
Modification Date
Modifier
Organization
Source
2008-07-01
Eric Dalci
Cigital
External
updated Potential Mitigations,
Time of Introduction
Description
