Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

Related Guidelines

Key here (explains table format and definitions)

Taxonomy

Taxonomy item

Relationship

CERT CSEI CERT C++ Coding StandardEXP19-CPP. Do not perform assignments in conditional expressionsPrior to 2018-01-12: CERT: Unspecified Relationship
CERT Oracle Secure Coding Standard for JavaEXP51-J. Do not perform assignments in conditional expressionsPrior to 2018-01-12: CERT: Unspecified Relationship
ISO/IEC TR 24772:2013Likely Incorrect Expression [KOA]Prior to 2018-01-12: CERT: Unspecified Relationship
ISO/IEC TS 17961No assignment in conditional expressions [boolasgn]Prior to 2018-01-12: CERT: Unspecified Relationship
CWE 2.11MITRE CWECWE-480, Use of Incorrect Operator2017-07-05: CERT: Rule subset of CWE
CWE 2.11CWE-4812017-07-05: CERT: Rule subset of CWE

CERT-CWE Mapping Notes

Key here for mapping notes

CWE-480 and EXP45-C

Intersection( EXP45-C, EXP46-C) = Ø CWE-480 = Union( EXP45-C, list) where list =

  • Usage of incorrect operator besides s/=/==/

CWE-569 and EXP45-C

CWE-480 = Subset( CWE-569)

Bibliography

[Dutta 03]"Best Practices for Programming in C"
[Hatton 1995]Section 2.7.2, "Errors of Omission and Addition"

...