Common Weakness Enumeration

A Community-Developed List of Software Weakness Types

CWE/SANS Top 25 Most Dangerous Software Errors
Home > CWE List > CWE- Individual Dictionary Definition (3.0)  

CWE CATEGORY: CERT C Secure Coding (2008 Version) Section 03 - Expressions (EXP)

Category ID: 737
Status: Incomplete
+ Summary
Weaknesses in this category are related to rules in the expressions section of the CERT C Secure Coding Standard, as published in 2008. Since not all rules map to specific weaknesses, this category may be incomplete.
+ Notes


In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:

  • CWE-467 EXP01-C Do not take the size of a pointer to determine the size of the pointed-to type
  • CWE-468 EXP08-C Ensure pointer arithmetic is used correctly
  • CWE-476 EXP34-C Ensure a null pointer is not dereferenced
  • CWE-628 EXP37-C Call functions with the arguments intended by the API
  • CWE-704 EXP05-C Do not cast away a const qualification
  • CWE-783 EXP00-C Use parentheses for precedence of operation
+ Content History
Submission DateSubmitterOrganization
2008-11-24CWE Content TeamMITRE
Modification DateModifierOrganization
2009-07-27CWE Content TeamMITRE
updated Relationships
2017-11-08CWE Content TeamMITRE
updated Description, Name, Relationship_Notes
Previous Entry Names
Change DatePrevious Entry Name
2017-11-08CERT C Secure Coding Section 03 - Expressions (EXP)

More information is available — Please select a different filter.
Page Last Updated: January 18, 2018