Page Information

Title:	ARR32-C. Ensure size arguments for variable length arrays are in a valid range
Author:	Jeffrey Gennari	Oct 12, 2006
Last Changed by:	Joerg Herter	Oct 29, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/AdcxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (1)     Page: CC. Undefined Behavior

Android (1)     Page: Unknown Applicability (C Rules/Recomendations)

Parent Page     Page: Rule 06. Arrays (ARR)

• not-for-cpp
• coverity
• nptc
• rose-nonapplicable
• android-unknown
• rule
• arr
• nptc-intent

Time	Editor
Oct 29, 2025 05:12	Joerg Herter	View Changes
Jul 02, 2025 07:48	Francesco Mariani	View Changes
May 05, 2025 08:42	Swasti Shrivastava	View Changes
REM Cost Reform
Dec 11, 2024 03:11	Swasti Shrivastava	View Changes
Nov 25, 2024 11:12	Caden Milne
Updated UB references from C11->C23

External Links (13)
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+C+Co…
    cwe.mitre.org/
    https://cwe.mitre.org/data/index.html758.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.mathworks.com/help/bugfinder/ref/certcrulearr32…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/INT01-C.+Use+…
    https://wiki.sei.cmu.edu/confluence/display/c/How+this+Codi…

SEI CERT C Coding Standard (33)     Page: PC-lint Plus_V     Page: Helix QAC     Page: TrustInSoft Analyzer_V     Page: BB. Definitions     Page: LDRA_V     Page: Helix QAC_V     Page: Security Reviewer - Static Reviewer     Page: CodeSonar     Page: Polyspace Bug Finder_V     Page: AA. Bibliography     Page: INT01-C. Use size_t or rsize_t for all integer values representing the size of an object     Page: Parasoft_V     Page: TrustInSoft Analyzer     Page: Polyspace Bug Finder     Page: Cppcheck Premium_V     Page: ARR39-C. Do not add or subtract a scaled integer to a pointer     Page: Astrée_V     Page: RuleChecker     Page: CC. Undefined Behavior     Page: Coverity_V     Home page: SEI CERT C Coding Standard     Page: Cppcheck     Page: Klocwork_V     Page: RuleChecker_V     Page: LDRA     Page: PC-lint Plus     Page: Cppcheck_V     Page: Astrée     Page: Cppcheck Premium     Page: Klocwork     Page: Parasoft     Page: CodeSonar_V     Page: Coverity