Summary

All variables in the source code should have an associated type.

Description

The data type of a variable defines the kind of data it can hold, such as integers, floating-point numbers, characters, strings, or custom data structures. Explicit typing contributes to type safety, ensuring that operations on variables are performed with appropriate types. This can help to properly catch potential errors.

References

• CWE-710. Improper adherence to coding standards
• CWE-1419. Incorrect Initialization of Resource
• AGILE-9. Continuous attention to technical excellence and good design
• SANS25-12. NULL pointer dereference
• ISO27002-8_28. Secure coding
• SIGLITE-SL_89. Is there a formal Software Development Life Cycle (SDLC) process?
• SIG-I_2_1. Application security
• ISO27001-8_28. Secure coding
• CWE25-476. NULL pointer dereference