Page Information

Title:	INT04-C. Enforce limits on integer values originating from tainted sources
Author:	Robert C. Seacord	Jul 20, 2006
Last Changed by:	David Svoboda	May 20, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/ddYxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (2)     Page: ARR38-C. Guarantee that library functions do not form invalid pointers     Page: MEM05-C. Avoid large stack allocations

Parent Page     Page: Rec. 04. Integers (INT)

• rose-possible
• android-applicable
• recommendation
• int

Time	Editor
May 20, 2025 07:16	David Svoboda	View Changes
REM Cost Reform
Jan 19, 2025 17:51	Michal Rozenau	View Changes
Parasoft C/C++test 2024.2
Jan 18, 2023 11:28	Jill Britton	View Changes
Apr 27, 2022 08:40	Jill Britton	View Changes
Apr 23, 2021 12:25	Jill Britton

External Links (12)
    https://www.securecoding.cert.org/confluence/display/seccod…
    https://www.mathworks.com/help/bugfinder/ref/certcrec.int02…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://www.securecoding.cert.org/confluence/display/seccod…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    BB. Definitions#denial-of-service attack
    BB. Definitions#unsigned integer wrapping
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    www.kb.cert.org/vuls/id/720951
    https://tools.ietf.org/html/rfc6520
    BB.%20Definitions#mutilated%20value

SEI CERT C++ Coding Standard (2)     Home page: SEI CERT C++ Coding Standard     Page: VOID INT04-CPP. Enforce limits on integer values originating from untrusted sources

SEI CERT C Coding Standard (18)     Home page: SEI CERT C Coding Standard     Page: Klocwork     Page: Klocwork_V     Page: INT30-C. Ensure that unsigned integer operations do not wrap     Page: MEM04-C. Beware of zero-length allocations     Page: Astrée     Page: Parasoft     Page: CodeSonar_V     Page: Helix QAC     Page: BB. Definitions     Page: Helix QAC_V     Page: INT01-C. Use size_t or rsize_t for all integer values representing the size of an object     Page: AA. Bibliography     Page: CodeSonar     Page: Polyspace Bug Finder     Page: Parasoft_V     Page: Polyspace Bug Finder_V     Page: Astrée_V