Page Information

Title:	ARR30-C. Do not form or use out-of-bounds pointers or array subscripts
Author:	Martin Sebor	Jun 06, 2010
Last Changed by:	David Svoboda	May 12, 2023
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/wtYxBQ
Export As:	Word · PDF

SEI CERT C++ Coding Standard (2)     Page: CTR55-CPP. Do not use an additive operator on an iterator if the result would overflow     Page: CTR50-CPP. Guarantee that container indices and iterators are within the valid range

Android (1)     Page: Unknown Applicability (C Rules/Recomendations)

SEI CERT C Coding Standard (6)     Page: INT32-C. Ensure that operations on signed integers do not result in overflow     Page: STR34-C. Cast characters to unsigned char before converting to larger integer sizes     Page: ARR39-C. Do not add or subtract a scaled integer to a pointer     Page: INT30-C. Ensure that unsigned integer operations do not wrap     Page: CC. Undefined Behavior     Page: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator

Parent Page     Page: Rule 06. Arrays (ARR)

• cwe-129
• cwe-805
• ptc
• android-unknown
• rule
• arr
• cwe-788
• cwe-122
• cwe-121
• cwe-119
• in-cpp

Time	Editor
May 12, 2023 10:30	David Svoboda	View Changes
Apr 20, 2023 05:18	Jill Britton	View Changes
Jan 19, 2023 09:03	Jill Britton	View Changes
Jan 18, 2023 11:37	Jill Britton	View Changes
Aug 10, 2022 04:01	Valery

External Links (29)
    https://pvs-studio.com/en/docs/warnings/v694/
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://www.mathworks.com/help/bugfinder/ref/certcrulearr30…
    cwe.mitre.org/data/definitions/121.html
    https://pvs-studio.com/en/docs/warnings/v557/
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://pvs-studio.com/en/docs/warnings/v1086/
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://taas.trust-in-soft.com/tsnippet/t/3a7bd506
    https://pvs-studio.com/en/docs/warnings/v594/
    https://pvs-studio.com/en/docs/warnings/v582/
    cwe.mitre.org/data/definitions/122.html
    https://pvs-studio.com/en/docs/warnings/v512/
    www.iss.net/threats/289.html
    https://pvs-studio.com/en/docs/warnings/v643/
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://cwe.mitre.org/data/definitions/123.html
    https://wiki.sei.cmu.edu/confluence/display/c/PVS-Studio
    https://pvs-studio.com/en/docs/warnings/v645/
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    cwe.mitre.org/data/definitions/119.html
    xorl.wordpress.com/2009/06/09/cve-2008-1517-apple-mac-os-x-…
    web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1517
    cwe.mitre.org/data/definitions/129.html
    https://wiki.sei.cmu.edu/confluence/display/c/How+this+Codi…
    https://cwe.mitre.org/data/index.html
    https://cwe.mitre.org/data/definitions/125.html

SEI CERT C Coding Standard (35)     Page: CodeSonar     Page: Cppcheck_V     Page: Parasoft_V     Page: PC-lint Plus     Page: PC-lint Plus_V     Page: Polyspace Bug Finder_V     Page: Polyspace Bug Finder     Page: Klocwork_V     Page: Astrée_V     Page: BB. Definitions     Page: Axivion Bauhaus Suite     Page: Parasoft     Page: RuleChecker     Page: Cppcheck     Page: Astrée     Page: Klocwork     Page: RuleChecker_V     Page: PVS-Studio_V     Page: LDRA     Page: MSC21-C. Use robust loop termination conditions     Page: INT30-C. Ensure that unsigned integer operations do not wrap     Page: LDRA_V     Page: Coverity_V     Page: TrustInSoft Analyzer     Page: TrustInSoft Analyzer_V     Page: Helix QAC_V     Page: AA. Bibliography     Home page: SEI CERT C Coding Standard     Page: Helix QAC     Page: Axivion Bauhaus Suite_V     Page: ERR33-C. Detect and handle standard library errors     Page: CC. Undefined Behavior     Page: Rose     Page: CodeSonar_V     Page: Coverity