...
| CERT C++ Secure Coding Standard | INT05-CPP. Do not use input functions to convert character data if they cannot handle all possible inputs |
|---|---|
| MITRE CWE | CWE-192, Integer coercion error CWE-197, Numeric truncation error |
Bibliography
| [ISO/IEC 9899:2011] | Section 7.22.1.4, "The strtol, strtoll, strtoul, and strtoull Functions," and section 7.21.6, "Formatted Input/Output Functions" |
|---|---|
| [Klein 2002] | |
| [Linux 2008] | scanf(3) |