Page Information

Title:	MEM07-C. Ensure that the arguments to calloc(), when multiplied, do not wrap
Author:	Jeffrey Gennari	Jun 23, 2006
Last Changed by:	Jill Britton	Jul 24, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/3tUxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (1)     Page: MEM03-C. Clear sensitive information stored in reusable resources

Parent Page     Page: Rec. 08. Memory Management (MEM)

• compass/rose
• cwe-190
• android-applicable
• rose-complete
• recommendation
• cwe-128
• mem

Time	Editor
Jul 24, 2025 11:02	Jill Britton	View Changes
May 30, 2025 12:41	David Svoboda	View Changes
deprecation note
May 20, 2025 08:04	David Svoboda	View Changes
REM Cost Reform
Sep 03, 2019 10:51	Anirban Gangopadhyay	View Changes
Dec 06, 2018 09:17	Michal Rozenau
Parasoft C/C++test 10.4.1 update

External Links (9)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/data/definitions/128.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.securecoding.cert.org/confluence/display/seccod…
    cwe.mitre.org/data/definitions/190.html
    cwe.mitre.org/
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    cert.uni-stuttgart.de/advisories/calloc.php

SEI CERT C++ Coding Standard (2)     Page: VOID MEM07-CPP. Ensure that the arguments to calloc(), when multiplied, can be represented as a size_t     Home page: SEI CERT C++ Coding Standard

SEI CERT C Coding Standard (13)     Page: Parasoft     Page: CodeSonar     Page: CodeSonar_V     Page: AA. Bibliography     Home page: SEI CERT C Coding Standard     Page: ERR33-C. Detect and handle standard library errors     Page: Astrée_V     Page: Helix QAC     Page: Astrée     Page: Helix QAC_V     Page: Parasoft_V     Page: Rose     Page: BB. Definitions