Page Information

Title:	EXP33-C. Do not read uninitialized memory
Author:	Jeffrey Gennari	Jun 20, 2006
Last Changed by:	Caden Milne	Oct 24, 2024
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/AdYxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (3)     Page: MSC13-C. Detect and remove unused values     Page: DCL41-C. Do not declare variables inside a switch statement before the first case label     Page: CC. Undefined Behavior

SEI CERT C++ Coding Standard (1)     Page: EXP53-CPP. Do not read uninitialized memory

Parent Page     Page: Rule 03. Expressions (EXP)

• not-for-cpp
• gcc
• fortify
• compass/rose
• splint
• coverity
• code-defect
• android-applicable
• ptc
• memory-management
• rose-partial
• rule
• exp
• cwe-119
• cwe-665
• klocwork

Time	Editor
Oct 24, 2024 09:29	Caden Milne	View Changes
Updated references from C11->C23
Oct 10, 2024 12:59	Swasti Shrivastava	View Changes
Oct 09, 2023 14:26	Jill Britton	View Changes
Apr 20, 2023 06:30	Jill Britton	View Changes
Apr 20, 2023 05:08	Jill Britton

External Links (30)
    https://wiki.sei.cmu.edu/confluence/display/c/PVS-Studio
    web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1888
    https://wiki.sei.cmu.edu/confluence/display/c/MSC00-C.+Comp…
    https://wiki.sei.cmu.edu/confluence/display/cplusplus/EXP53…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://pvs-studio.com/en/docs/warnings/v679/
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://pvs-studio.com/en/docs/warnings/v1050/
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    www.kb.cert.org/vuls/id/925211
    https://pvs-studio.com/en/docs/warnings/v614/
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://cwe.mitre.org/data/index.html456.html
    https://taas.trust-in-soft.com/tsnippet/t/c72964e2
    https://pvs-studio.com/en/docs/warnings/v573/
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://cwe.mitre.org/data/index.html908.html
    https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+C+Co…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/MSC01-C.+Stri…
    cwe.mitre.org/
    https://cwe.mitre.org/data/index.html758.html
    xorl.wordpress.com/2009/06/26/cve-2009-1888-samba-acls-unin…
    https://www.mathworks.com/help/bugfinder/ref/certcruleexp33…
    https://pvs-studio.com/en/docs/warnings/v670/
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://cwe.mitre.org/data/index.html457.html
    kqueue.org/blog/2012/06/25/more-randomness-or-less/
    https://wiki.sei.cmu.edu/confluence/display/c/How+this+Codi…

SEI CERT C Coding Standard (39)     Page: Astrée     Page: Klocwork     Page: Axivion Bauhaus Suite_V     Page: Cppcheck     Page: LDRA     Page: Helix QAC     Page: TrustInSoft Analyzer_V     Page: RuleChecker     Page: Astrée_V     Page: Splint     Page: Cppcheck Premium_V     Page: Parasoft_V     Page: Axivion Bauhaus Suite     Page: Cppcheck_V     Page: Polyspace Bug Finder_V     Page: CodeSonar     Page: AA. Bibliography     Page: MSC00-C. Compile cleanly at high warning levels     Page: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator     Page: Klocwork_V     Page: Coverity_V     Page: GCC     Page: Parasoft     Page: PVS-Studio_V     Page: RuleChecker_V     Page: LDRA_V     Page: Polyspace Bug Finder     Home page: SEI CERT C Coding Standard     Page: BB. Definitions     Page: PC-lint Plus_V     Page: Cppcheck Premium     Page: PC-lint Plus     Page: TrustInSoft Analyzer     Page: Coverity     Page: MSC01-C. Strive for logical completeness     Page: CC. Undefined Behavior     Page: Helix QAC_V     Page: Rose     Page: CodeSonar_V