...
CERT C++ Secure Coding Standard | INT05-CPP. Do not use input functions to convert character data if they cannot handle all possible inputs |
---|---|
MITRE CWE | CWE-192, Integer coercion error CWE-197, Numeric truncation error |
Bibliography
[ISO/IEC 9899:2011] | Section 7.22.1.4, "The strtol , strtoll , strtoul , and strtoull Functions," and section 7.21.6, "Formatted Input/Output Functions" |
---|---|
[Klein 2002] | |
[Linux 2008] | scanf(3) |