Page Information

Title:	INT05-C. Do not use input functions to convert character data if they cannot handle all possible inputs
Author:	Admin	Aug 09, 2006
Last Changed by:	Jill Britton	Apr 20, 2023
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/CNcxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (1)     Page: MSC24-C. Do not use deprecated or obsolescent functions

Parent Page     Page: Rec. 04. Integers (INT)

• fortify
• compass/rose
• review
• android-applicable
• rose-partial
• input
• recommendation
• int

Time	Editor
Apr 20, 2023 06:12	Jill Britton	View Changes
Apr 23, 2021 12:26	Jill Britton	View Changes
Apr 21, 2021 05:17	Jill Britton	View Changes
Apr 20, 2021 06:35	Jill Britton	View Changes
Feb 28, 2021 15:17	Kris Kafka
Added PC-lint Plus to Automated Detection Table

External Links (8)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/data/definitions/192.html
    www.kernel.org/doc/man-pages/online/pages/man3/scanf.3.html
    cwe.mitre.org/data/definitions/197.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT C++ Coding Standard (2)     Page: VOID INT05-CPP. Do not use input functions to convert character data if they cannot handle all possible inputs     Home page: SEI CERT C++ Coding Standard

SEI CERT C Coding Standard (17)     Page: ERR34-C. Detect errors when converting a string to a number     Page: Axivion Bauhaus Suite_V     Page: Helix QAC_V     Page: Helix QAC     Page: PC-lint Plus_V     Page: BB. Definitions     Home page: SEI CERT C Coding Standard     Page: PC-lint Plus     Page: Parasoft_V     Page: Axivion Bauhaus Suite     Page: CodeSonar     Page: AA. Bibliography     Page: LDRA     Page: LDRA_V     Page: CodeSonar_V     Page: Rose     Page: Parasoft