CWE-467

Use of sizeof() on a Pointer Type
AI Translation Available

The code calls sizeof() on a pointer type, which can be an incorrect calculation if the programmer intended to determine the size of the data that is being pointed to.

Status
draft
Abstraction
variant
Likelihood
high
C C++

The use of sizeof() on a pointer can sometimes generate useful information. An obvious case is to find out the wordsize on a platform. More often than not, the appearance of sizeof(pointer) indicates a bug.

Common Consequences

integrity confidentiality
Impacts
modify memory read memory

Detection Methods

automated static analysis

Potential Mitigations

Phases:
implementation
Descriptions:
• Use expressions such as "sizeof(*pointer)" instead of "sizeof(pointer)", unless you intend to run sizeof() on a pointer type to gain some platform independence or if you are allocating a variable on the stack.