Tên: Weaknesses Addressed by the SEI CERT C Coding Standard

CWE entries in this view (graph) are fully or partially eliminated by following the guidance presented in the online wiki that reflects that current rules and recommendations of the SEI CERT C Coding Standard.

Thành viên CWE

CWE-1155: SEI CERT C Coding Standard - Guidelines 01. Preprocessor (PRE) Danh mục

CWE-1155: Weaknesses in this category are related to the rules and recommendations in the Preprocessor (PRE) section of the SEI CERT C Coding Standard.

CWE-1156: SEI CERT C Coding Standard - Guidelines 02. Declarations and Initialization (DCL) Danh mục

CWE-1156: Weaknesses in this category are related to the rules and recommendations in the Declarations and Initialization (DCL) section of the SEI CERT C Coding Standard.

CWE-562: Return of Stack Variable Address Cơ sở

CWE-1157: SEI CERT C Coding Standard - Guidelines 03. Expressions (EXP) Danh mục

CWE-1157: Weaknesses in this category are related to the rules and recommendations in the Expressions (EXP) section of the SEI CERT C Coding Standard.

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior Cơ sở

CWE-908: Use of Uninitialized Resource Cơ sở

CWE-476: NULL Pointer Dereference Cơ sở

CWE-690: Unchecked Return Value to NULL Pointer Dereference Cơ sở

CWE-628: Function Call with Incorrectly Specified Arguments Cơ sở

CWE-685: Function Call With Incorrect Number of Arguments Cơ sở

CWE-686: Function Call With Incorrect Argument Type Cơ sở

CWE-843: Access of Resource Using Incompatible Type Cơ sở

CWE-704: Incorrect Type Conversion or Cast Cơ sở

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Cơ sở

CWE-125: Out-of-bounds Read Cơ sở

CWE-480: Use of Incorrect Operator Cơ sở

CWE-481: Assigning instead of Comparing Cơ sở

CWE-1158: SEI CERT C Coding Standard - Guidelines 04. Integers (INT) Danh mục

CWE-1158: Weaknesses in this category are related to the rules and recommendations in the Integers (INT) section of the SEI CERT C Coding Standard.

CWE-190: Integer Overflow or Wraparound Cơ sở

CWE-131: Incorrect Calculation of Buffer Size Cơ sở

CWE-191: Integer Underflow (Wrap or Wraparound) Cơ sở

CWE-680: Integer Overflow to Buffer Overflow Cơ sở

CWE-192: Integer Coercion Error Cơ sở

CWE-197: Numeric Truncation Error Cơ sở

CWE-681: Incorrect Conversion between Numeric Types Cơ sở

CWE-704: Incorrect Type Conversion or Cast Cơ sở

CWE-194: Unexpected Sign Extension Cơ sở

CWE-195: Signed to Unsigned Conversion Error Cơ sở

CWE-369: Divide By Zero Cơ sở

CWE-682: Incorrect Calculation Cơ sở

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior Cơ sở

CWE-587: Assignment of a Fixed Address to a Pointer Cơ sở

CWE-1159: SEI CERT C Coding Standard - Guidelines 05. Floating Point (FLP) Danh mục

CWE-1159: Weaknesses in this category are related to the rules and recommendations in the Floating Point (FLP) section of the SEI CERT C Coding Standard.

CWE-682: Incorrect Calculation Cơ sở

CWE-391: DEPRECATED: Unchecked Error Condition Cơ sở

CWE-681: Incorrect Conversion between Numeric Types Cơ sở

CWE-197: Numeric Truncation Error Cơ sở

CWE-1160: SEI CERT C Coding Standard - Guidelines 06. Arrays (ARR) Danh mục

CWE-1160: Weaknesses in this category are related to the rules and recommendations in the Arrays (ARR) section of the SEI CERT C Coding Standard.

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Cơ sở

CWE-129: Improper Validation of Array Index Cơ sở

CWE-786: Access of Memory Location Before Start of Buffer Cơ sở

CWE-123: Write-what-where Condition Cơ sở

CWE-125: Out-of-bounds Read Cơ sở

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior Cơ sở

CWE-469: Use of Pointer Subtraction to Determine Size Cơ sở

CWE-121: Stack-based Buffer Overflow Cơ sở

CWE-805: Buffer Access with Incorrect Length Value Cơ sở

CWE-468: Incorrect Pointer Scaling Cơ sở

CWE-1161: SEI CERT C Coding Standard - Guidelines 07. Characters and Strings (STR) Danh mục

CWE-1161: Weaknesses in this category are related to the rules and recommendations in the Characters and Strings (STR) section of the SEI CERT C Coding Standard.

CWE-120: Buffer Copy without Checking Size of Input Cơ sở

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Cơ sở

CWE-121: Stack-based Buffer Overflow Cơ sở

CWE-122: Heap-based Buffer Overflow Cơ sở

CWE-123: Write-what-where Condition Cơ sở

CWE-125: Out-of-bounds Read Cơ sở

CWE-676: Use of Potentially Dangerous Function Cơ sở

CWE-170: Improper Null Termination Cơ sở

CWE-704: Incorrect Type Conversion or Cast Cơ sở

CWE-1162: SEI CERT C Coding Standard - Guidelines 08. Memory Management (MEM) Danh mục

CWE-1162: Weaknesses in this category are related to the rules and recommendations in the Memory Management (MEM) section of the SEI CERT C Coding Standard.

CWE-416: Use After Free Cơ sở

CWE-672: Operation on a Resource after Expiration or Release Cơ sở

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior Cơ sở

CWE-666: Operation on Resource in Wrong Phase of Lifetime Cơ sở

CWE-415: Double Free Cơ sở

CWE-401: Missing Release of Memory after Effective Lifetime Cơ sở

CWE-404: Improper Resource Shutdown or Release Cơ sở

CWE-459: Incomplete Cleanup Cơ sở

CWE-771: Missing Reference to Active Allocated Resource Cơ sở

CWE-772: Missing Release of Resource after Effective Lifetime Cơ sở

CWE-590: Free of Memory not on the Heap Cơ sở

CWE-131: Incorrect Calculation of Buffer Size Cơ sở

CWE-680: Integer Overflow to Buffer Overflow Cơ sở

CWE-467: Use of sizeof() on a Pointer Type Cơ sở

CWE-789: Memory Allocation with Excessive Size Value Cơ sở

CWE-190: Integer Overflow or Wraparound Cơ sở

CWE-1163: SEI CERT C Coding Standard - Guidelines 09. Input Output (FIO) Danh mục

CWE-1163: Weaknesses in this category are related to the rules and recommendations in the Input Output (FIO) section of the SEI CERT C Coding Standard.

CWE-134: Use of Externally-Controlled Format String Cơ sở

CWE-20: Improper Input Validation Cơ sở

CWE-67: Improper Handling of Windows Device Names Cơ sở

CWE-197: Numeric Truncation Error Cơ sở

CWE-241: Improper Handling of Unexpected Data Type Cơ sở

CWE-664: Improper Control of a Resource Through its Lifetime Cơ sở

CWE-404: Improper Resource Shutdown or Release Cơ sở

CWE-459: Incomplete Cleanup Cơ sở

CWE-772: Missing Release of Resource after Effective Lifetime Cơ sở

CWE-773: Missing Reference to Active File Descriptor or Handle Cơ sở

CWE-775: Missing Release of File Descriptor or Handle after Effective Lifetime Cơ sở

CWE-771: Missing Reference to Active Allocated Resource Cơ sở

CWE-910: Use of Expired File Descriptor Cơ sở

CWE-666: Operation on Resource in Wrong Phase of Lifetime Cơ sở

CWE-672: Operation on a Resource after Expiration or Release Cơ sở

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior Cơ sở

CWE-686: Function Call With Incorrect Argument Type Cơ sở

CWE-685: Function Call With Incorrect Number of Arguments Cơ sở

CWE-1165: SEI CERT C Coding Standard - Guidelines 10. Environment (ENV) Danh mục

CWE-1165: Weaknesses in this category are related to the rules and recommendations in the Environment (ENV) section of the SEI CERT C Coding Standard.

CWE-705: Incorrect Control Flow Scoping Cơ sở

CWE-676: Use of Potentially Dangerous Function Cơ sở

CWE-78: Improper Neutralization of Special Elements used in an OS Command Cơ sở

CWE-88: Improper Neutralization of Argument Delimiters in a Command Cơ sở

CWE-1166: SEI CERT C Coding Standard - Guidelines 11. Signals (SIG) Danh mục

CWE-1166: Weaknesses in this category are related to the rules and recommendations in the Signals (SIG) section of the SEI CERT C Coding Standard.

CWE-479: Signal Handler Use of a Non-reentrant Function Cơ sở

CWE-662: Improper Synchronization Cơ sở

CWE-1167: SEI CERT C Coding Standard - Guidelines 12. Error Handling (ERR) Danh mục

CWE-1167: Weaknesses in this category are related to the rules and recommendations in the Error Handling (ERR) section of the SEI CERT C Coding Standard.

CWE-456: Missing Initialization of a Variable Cơ sở

CWE-391: DEPRECATED: Unchecked Error Condition Cơ sở

CWE-252: Unchecked Return Value Cơ sở

CWE-253: Incorrect Check of Function Return Value Cơ sở

CWE-676: Use of Potentially Dangerous Function Cơ sở

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior Cơ sở

CWE-1168: SEI CERT C Coding Standard - Guidelines 13. Application Programming Interfaces (API) Danh mục

CWE-1168: Weaknesses in this category are related to the rules and recommendations in the Application Programming Interfaces (API) section of the SEI CERT C Coding Standard.

CWE-1169: SEI CERT C Coding Standard - Guidelines 14. Concurrency (CON) Danh mục

CWE-1169: Weaknesses in this category are related to the rules and recommendations in the Concurrency (CON) section of the SEI CERT C Coding Standard.

CWE-667: Improper Locking Cơ sở

CWE-366: Race Condition within a Thread Cơ sở

CWE-676: Use of Potentially Dangerous Function Cơ sở

CWE-330: Use of Insufficiently Random Values Cơ sở

CWE-377: DEPRECATED: Insecure Temporary File Cơ sở

CWE-1170: SEI CERT C Coding Standard - Guidelines 48. Miscellaneous (MSC) Danh mục

CWE-1170: Weaknesses in this category are related to the rules and recommendations in the Miscellaneous (MSC) section of the SEI CERT C Coding Standard.

CWE-327: Use of a Broken or Risky Cryptographic Algorithm Cơ sở

CWE-330: Use of Insufficiently Random Values Cơ sở

CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Cơ sở

CWE-676: Use of Potentially Dangerous Function Cơ sở

CWE-331: Insufficient Entropy Cơ sở

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior Cơ sở

CWE-1171: SEI CERT C Coding Standard - Guidelines 50. POSIX (POS) Danh mục

CWE-1171: Weaknesses in this category are related to the rules and recommendations in the POSIX (POS) section of the SEI CERT C Coding Standard.

CWE-170: Improper Null Termination Cơ sở

CWE-242: Use of Inherently Dangerous Function Cơ sở

CWE-363: Race Condition Enabling Link Following Cơ sở

CWE-696: Incorrect Behavior Order Cơ sở

CWE-273: Improper Check for Dropped Privileges Cơ sở

CWE-667: Improper Locking Cơ sở

CWE-391: DEPRECATED: Unchecked Error Condition Cơ sở

CWE-252: Unchecked Return Value Cơ sở

CWE-253: Incorrect Check of Function Return Value Cơ sở

CWE-1172: SEI CERT C Coding Standard - Guidelines 51. Microsoft Windows (WIN) Danh mục

CWE-1172: Weaknesses in this category are related to the rules and recommendations in the Microsoft Windows (WIN) section of the SEI CERT C Coding Standard.

CWE-762: Mismatched Memory Management Routines Cơ sở

CWE-590: Free of Memory not on the Heap Cơ sở

Thông tin chế độ xem CWE

Ghi chú ánh xạ lỗ hổng

Lý do : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Bình luận : Use this View or other Views to search and navigate for the appropriate weakness.

Ghi chú

The relationships in this view were determined based on specific statements within the rules from the standard. Not all rules have direct relationships to individual weaknesses, although they likely have chaining relationships in specific circumstances.

Đối tượng

Bên liên quan	Mô tả
Software Developers	By following the SEI CERT C Coding Standard, developers will be able to fully or partially prevent the weaknesses that are identified in this view. In addition, developers can use a CWE coverage graph to determine which weaknesses are not directly addressed by the standard, which will help identify and resolve remaining gaps in training, tool acquisition, or other approaches for reducing weaknesses.
Product Customers	If a software developer claims to be following the SEI CERT C Coding standard, then customers can search for the weaknesses in this view in order to formulate independent evidence of that claim.
Educators	Educators can use this view in multiple ways. For example, if there is a focus on teaching weaknesses, the educator could link them to the relevant Secure Coding Standard.

Gửi

Tên	Tổ chức	Ngày	Ngày phát hành	Version
CWE Content Team	MITRE	2018-12-18 +00:00	2019-01-03 +00:00	3.2

Sửa đổi

Tên	Tổ chức	Ngày	Bình luận
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

Tài liệu tham khảo

REF-598

SEI CERT C Coding Standard
The Software Engineering Institute.
https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+C+Coding+Standard

Chi tiết chế độ xem CWE-1154

CWE-1154

Tên: Weaknesses Addressed by the SEI CERT C Coding Standard

Thành viên CWE

CWE-1155: SEI CERT C Coding Standard - Guidelines 01. Preprocessor (PRE) Danh mục

CWE-1156: SEI CERT C Coding Standard - Guidelines 02. Declarations and Initialization (DCL) Danh mục

CWE-1157: SEI CERT C Coding Standard - Guidelines 03. Expressions (EXP) Danh mục

CWE-1158: SEI CERT C Coding Standard - Guidelines 04. Integers (INT) Danh mục

CWE-1159: SEI CERT C Coding Standard - Guidelines 05. Floating Point (FLP) Danh mục

CWE-1160: SEI CERT C Coding Standard - Guidelines 06. Arrays (ARR) Danh mục

CWE-1161: SEI CERT C Coding Standard - Guidelines 07. Characters and Strings (STR) Danh mục

CWE-1162: SEI CERT C Coding Standard - Guidelines 08. Memory Management (MEM) Danh mục

CWE-1163: SEI CERT C Coding Standard - Guidelines 09. Input Output (FIO) Danh mục

CWE-1165: SEI CERT C Coding Standard - Guidelines 10. Environment (ENV) Danh mục

CWE-1166: SEI CERT C Coding Standard - Guidelines 11. Signals (SIG) Danh mục

CWE-1167: SEI CERT C Coding Standard - Guidelines 12. Error Handling (ERR) Danh mục

CWE-1168: SEI CERT C Coding Standard - Guidelines 13. Application Programming Interfaces (API) Danh mục

CWE-1169: SEI CERT C Coding Standard - Guidelines 14. Concurrency (CON) Danh mục

CWE-1170: SEI CERT C Coding Standard - Guidelines 48. Miscellaneous (MSC) Danh mục

CWE-1171: SEI CERT C Coding Standard - Guidelines 50. POSIX (POS) Danh mục

CWE-1172: SEI CERT C Coding Standard - Guidelines 51. Microsoft Windows (WIN) Danh mục

Thông tin chế độ xem CWE

Ghi chú ánh xạ lỗ hổng

Ghi chú

Đối tượng

Gửi

Sửa đổi

Tài liệu tham khảo

REF-598