Page Information

Title:	ERR33-C. Detect and handle standard library errors
Author:	Martin Sebor	May 01, 2010
Last Changed by:	Caden Milne	Nov 12, 2024
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/kNYxBQ
Export As:	Word · PDF

SEI CERT C++ Coding Standard (1)     Page: MEM52-CPP. Detect and handle memory allocation errors

SEI CERT C Coding Standard (9)     Page: FIO41-C. Do not call getc(), putc(), getwc(), or putwc() with a stream argument that has side effects     Page: EXP34-C. Do not dereference null pointers     Page: POS54-C. Detect and handle POSIX library errors     Page: ARR30-C. Do not form or use out-of-bounds pointers or array subscripts     Page: ERR05-C. Application-independent code should provide error detection without dictating error handling     Page: MEM07-C. Ensure that the arguments to calloc(), when multiplied, do not wrap     Page: ARR00-C. Understand how arrays work     Page: EXP12-C. Do not ignore values returned by functions     Page: MEM11-C. Do not assume infinite heap space

Parent Page     Page: Rule 12. Error Handling (ERR)

• cwe-253
• cwe-390
• cwe-391
• cwe-252
• nptc
• android-applicable
• rule
• err
• nptc-complexity
• nptc-intent
• in-cpp

Time	Editor
Nov 12, 2024 09:33	Caden Milne	View Changes
Updated references from C11->C23
Jun 21, 2023 14:08	Robert Schiela	View Changes
Jun 21, 2023 11:48	Robert Schiela	View Changes
Removed extra space
Jun 21, 2023 11:48	Robert Schiela	View Changes
Removed extra space.
Jun 21, 2023 11:32	David Svoboda
added fputs() & a few neightors to exception

External Links (26)
    https://cwe.mitre.org/data/index.html
    https://wiki.sei.cmu.edu/confluence/display/cplusplus/ERR10…
    cwe.mitre.org/data/definitions/253.html
    https://wiki.sei.cmu.edu/confluence/display/c/MEM12-C.+Cons…
    https://wiki.sei.cmu.edu/confluence/display/c/How+this+Codi…
    https://wiki.sei.cmu.edu/confluence/display/c/EXP34-C.+Do+n…
    https://wiki.sei.cmu.edu/confluence/display/c/Polyspace+Bug…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/MEM04-C.+Bewa…
    bugzilla.redhat.com/show_bug.cgi?id=441945
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/data/definitions/252.html
    https://wiki.sei.cmu.edu/confluence/display/cplusplus/FIO04…
    https://wiki.sei.cmu.edu/confluence/display/c/FIO13-C.+Neve…
    buildsecurityin.us-cert.gov/bsi/articles/knowledge/guidelin…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.mathworks.com/help/bugfinder/ref/certcruleerr33…
    file:///C:/Users/pjumde/Desktop/TS_17961_2013-11-01.doc#Fai…
    cwe.mitre.org/data/definitions/391.html
    https://www.securecoding.cert.org/confluence/display/seccod…
    https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+C+Co…
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://wiki.sei.cmu.edu/confluence/display/c/ERR00-C.+Adop…

SEI CERT C Coding Standard (32)     Page: Astrée     Page: Axivion Bauhaus Suite_V     Page: RuleChecker     Page: Parasoft     Page: CodeSonar_V     Page: Astrée_V     Page: Helix QAC_V     Page: Helix QAC     Page: Klocwork_V     Page: Parasoft_V     Page: Polyspace Bug Finder_V     Page: AA. Bibliography     Page: FIO13-C. Never push back anything other than one read character     Page: PC-lint Plus_V     Page: Axivion Bauhaus Suite     Page: MEM04-C. Beware of zero-length allocations     Page: TrustInSoft Analyzer_V     Page: Coverity_V     Page: LDRA     Page: CodeSonar     Page: Klocwork     Page: LDRA_V     Page: RuleChecker_V     Page: void FIO35-C. Use feof() and ferror() to detect end-of-file and file errors when sizeof(int) == sizeof(char)     Home page: SEI CERT C Coding Standard     Page: EXP12-C. Do not ignore values returned by functions     Page: BB. Definitions     Page: PC-lint Plus     Page: Coverity     Page: TrustInSoft Analyzer     Page: MEM12-C. Consider using a goto chain when leaving a function on error when using and releasing resources     Page: Rose