GitHub
CERT Secure Coding

EXP13-C. Treat relational and equality operators as if they were nonassociative

The relational and equality operators are left-associative in C. Consequently, C, unlike many other languages, allows chaining of relational and equality operators. Subclause 6.5.8, footnote 107, of the C Standard [ ISO/IEC 9899:2011 ], says:

The expression a<b<c is not interpreted as in ordinary mathematics. As the syntax indicates, it means (a<b)<c ; in other words, "if a is less than b , compare 1 to c ; otherwise, compare 0 to c ."

These operators are left-associative , which means the leftmost comparison is performed first, and the result is compared with the rightmost comparison. This syntax allows a programmer to write an expression (particularly an expression used as a condition) that can be easily misinterpreted.

Noncompliant Code Example

Although this noncompliant code example compiles correctly, it is unlikely that it means what the author of the code intended:

Non-compliant code
int a = 2;
int b = 2;
int c = 2;
/* ... */
if (a < b < c) /* Misleading; likely bug */
/* ... */
if (a == b == c) /* Misleading; likely bug */

The expression a < b < c evaluates to true rather than, as its author probably intended, to false, and the expression a == b == c evaluates to false rather than, as its author probably intended, to true.

Compliant Solution

Treat relational and equality operators as if it were invalid to chain them:

Compliant code
if ( (a < b) && (b < c) ) /* Clearer and probably what was intended */
/* ... */
if ( (a == b) && (a == c) ) /* Ditto */

Risk Assessment

Incorrect use of relational and equality operators can lead to incorrect control flow.

Rule Severity Likelihood Detectable Repairable Priority Level
EXP13-C Low Unlikely Yes Yes P3 L3

Automated Detection

Tool

Version

Checker

Description

Astrée
25.10
chained-comparisonFully checked

ECLAIR

1.2

CC2.EXP13

Fully implemented

GCC
4.3.5


Option -Wparentheses warns if a comparison like x<=y<=z appears; this warning is also enabled by -Wall

Helix QAC

2025.2

C3392, C3401, C4111, C4112, C4113


LDRA tool suite
9.7.1
433 SFully implemented
PC-lint Plus

1.4

503, 731

Fully supported

Polyspace Bug Finder

R2025b

CERT C: Rec. EXP13-CChecks for possibly unintended evaluation of expression because of operator precedence rules (rec. fully covered)


PVS-Studio

7.42

V709
RuleChecker
25.10
chained-comparisonFully checked
SEI CERT C++ Coding StandardVOID EXP17-CPP. Treat relational and equality operators as if they were nonassociative

Bibliography

[ ISO/IEC 9899:2011 ]Subclause 6.5.8, "Relational Operators"