Tên: Weaknesses Addressed by the CERT C Secure Coding Standard (2008)

CWE entries in this view (graph) are fully or partially eliminated by following the guidance presented in the book "The CERT C Secure Coding Standard" published in 2008. This view is considered obsolete, as a newer version of the coding standard is available. This view statically represents the coding rules as they were in 2008.

Thành viên CWE

CWE-735: CERT C Secure Coding Standard (2008) Chapter 2 - Preprocessor (PRE) Danh mục

CWE-735: Weaknesses in this category are related to the rules and recommendations in the Preprocessor (PRE) chapter of the CERT C Secure Coding Standard (2008).

CWE-684: Incorrect Provision of Specified Functionality Cơ sở

CWE-736: CERT C Secure Coding Standard (2008) Chapter 3 - Declarations and Initialization (DCL) Danh mục

CWE-736: Weaknesses in this category are related to the rules and recommendations in the Declarations and Initialization (DCL) chapter of the CERT C Secure Coding Standard (2008).

CWE-547: Use of Hard-coded, Security-relevant Constants Cơ sở

CWE-628: Function Call with Incorrectly Specified Arguments Cơ sở

CWE-686: Function Call With Incorrect Argument Type Cơ sở

CWE-737: CERT C Secure Coding Standard (2008) Chapter 4 - Expressions (EXP) Danh mục

CWE-737: Weaknesses in this category are related to the rules and recommendations in the Expressions (EXP) chapter of the CERT C Secure Coding Standard (2008).

CWE-467: Use of sizeof() on a Pointer Type Cơ sở

CWE-468: Incorrect Pointer Scaling Cơ sở

CWE-476: NULL Pointer Dereference Cơ sở

CWE-628: Function Call with Incorrectly Specified Arguments Cơ sở

CWE-704: Incorrect Type Conversion or Cast Cơ sở

CWE-783: Operator Precedence Logic Error Cơ sở

CWE-738: CERT C Secure Coding Standard (2008) Chapter 5 - Integers (INT) Danh mục

CWE-738: Weaknesses in this category are related to the rules and recommendations in the Integers (INT) chapter of the CERT C Secure Coding Standard (2008).

CWE-129: Improper Validation of Array Index Cơ sở

CWE-190: Integer Overflow or Wraparound Cơ sở

CWE-192: Integer Coercion Error Cơ sở

CWE-197: Numeric Truncation Error Cơ sở

CWE-20: Improper Input Validation Cơ sở

CWE-369: Divide By Zero Cơ sở

CWE-466: Return of Pointer Value Outside of Expected Range Cơ sở

CWE-587: Assignment of a Fixed Address to a Pointer Cơ sở

CWE-606: Unchecked Input for Loop Condition Cơ sở

CWE-676: Use of Potentially Dangerous Function Cơ sở

CWE-681: Incorrect Conversion between Numeric Types Cơ sở

CWE-682: Incorrect Calculation Cơ sở

CWE-739: CERT C Secure Coding Standard (2008) Chapter 6 - Floating Point (FLP) Danh mục

CWE-739: Weaknesses in this category are related to the rules and recommendations in the Floating Point (FLP) chapter of the CERT C Secure Coding Standard (2008).

CWE-369: Divide By Zero Cơ sở

CWE-681: Incorrect Conversion between Numeric Types Cơ sở

CWE-682: Incorrect Calculation Cơ sở

CWE-686: Function Call With Incorrect Argument Type Cơ sở

CWE-740: CERT C Secure Coding Standard (2008) Chapter 7 - Arrays (ARR) Danh mục

CWE-740: Weaknesses in this category are related to the rules and recommendations in the Arrays (ARR) chapter of the CERT C Secure Coding Standard (2008).

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Cơ sở

CWE-129: Improper Validation of Array Index Cơ sở

CWE-467: Use of sizeof() on a Pointer Type Cơ sở

CWE-469: Use of Pointer Subtraction to Determine Size Cơ sở

CWE-665: Improper Initialization Cơ sở

CWE-805: Buffer Access with Incorrect Length Value Cơ sở

CWE-741: CERT C Secure Coding Standard (2008) Chapter 8 - Characters and Strings (STR) Danh mục

CWE-741: Weaknesses in this category are related to the rules and recommendations in the Characters and Strings (STR) chapter of the CERT C Secure Coding Standard (2008).

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Cơ sở

CWE-120: Buffer Copy without Checking Size of Input Cơ sở

CWE-135: Incorrect Calculation of Multi-Byte String Length Cơ sở

CWE-170: Improper Null Termination Cơ sở

CWE-193: Off-by-one Error Cơ sở

CWE-464: Addition of Data Structure Sentinel Cơ sở

CWE-686: Function Call With Incorrect Argument Type Cơ sở

CWE-704: Incorrect Type Conversion or Cast Cơ sở

CWE-78: Improper Neutralization of Special Elements used in an OS Command Cơ sở

CWE-88: Improper Neutralization of Argument Delimiters in a Command Cơ sở

CWE-742: CERT C Secure Coding Standard (2008) Chapter 9 - Memory Management (MEM) Danh mục

CWE-742: Weaknesses in this category are related to the rules and recommendations in the Memory Management (MEM) chapter of the CERT C Secure Coding Standard (2008).

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Cơ sở

CWE-128: Wrap-around Error Cơ sở

CWE-131: Incorrect Calculation of Buffer Size Cơ sở

CWE-190: Integer Overflow or Wraparound Cơ sở

CWE-20: Improper Input Validation Cơ sở

CWE-226: Sensitive Information in Resource Not Removed Before Reuse Cơ sở

CWE-244: Improper Clearing of Heap Memory Before Release Cơ sở

CWE-252: Unchecked Return Value Cơ sở

CWE-415: Double Free Cơ sở

CWE-416: Use After Free Cơ sở

CWE-476: NULL Pointer Dereference Cơ sở

CWE-528: Exposure of Core Dump File to an Unauthorized Control Sphere Cơ sở

CWE-590: Free of Memory not on the Heap Cơ sở

CWE-591: Sensitive Data Storage in Improperly Locked Memory Cơ sở

CWE-628: Function Call with Incorrectly Specified Arguments Cơ sở

CWE-665: Improper Initialization Cơ sở

CWE-687: Function Call With Incorrectly Specified Argument Value Cơ sở

CWE-754: Improper Check for Unusual or Exceptional Conditions Cơ sở

CWE-743: CERT C Secure Coding Standard (2008) Chapter 10 - Input Output (FIO) Danh mục

CWE-743: Weaknesses in this category are related to the rules and recommendations in the Input Output (FIO) chapter of the CERT C Secure Coding Standard (2008).

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Cơ sở

CWE-134: Use of Externally-Controlled Format String Cơ sở

CWE-22: Improper Limitation of a Pathname to a Restricted Directory Cơ sở

CWE-241: Improper Handling of Unexpected Data Type Cơ sở

CWE-276: Incorrect Default Permissions Cơ sở

CWE-279: Incorrect Execution-Assigned Permissions Cơ sở

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization Cơ sở

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition Cơ sở

CWE-37: Path Traversal: '/absolute/pathname/here' Cơ sở

CWE-379: Creation of Temporary File in Directory with Insecure Permissions Cơ sở

CWE-38: Path Traversal: '\absolute\pathname\here' Cơ sở

CWE-39: Path Traversal: 'C:dirname' Cơ sở

CWE-391: DEPRECATED: Unchecked Error Condition Cơ sở

CWE-403: Exposure of File Descriptor to Unintended Control Sphere Cơ sở

CWE-404: Improper Resource Shutdown or Release Cơ sở

CWE-41: Improper Resolution of Path Equivalence Cơ sở

CWE-552: Files or Directories Accessible to External Parties Cơ sở

CWE-59: Improper Link Resolution Before File Access Cơ sở

CWE-62: UNIX Hard Link Cơ sở

CWE-64: Windows Shortcut Following (.LNK) Cơ sở

CWE-65: Windows Hard Link Cơ sở

CWE-67: Improper Handling of Windows Device Names Cơ sở

CWE-675: Multiple Operations on Resource in Single-Operation Context Cơ sở

CWE-676: Use of Potentially Dangerous Function Cơ sở

CWE-686: Function Call With Incorrect Argument Type Cơ sở

CWE-732: Incorrect Permission Assignment for Critical Resource Cơ sở

CWE-744: CERT C Secure Coding Standard (2008) Chapter 11 - Environment (ENV) Danh mục

CWE-744: Weaknesses in this category are related to the rules and recommendations in the Environment (ENV) chapter of the CERT C Secure Coding Standard (2008).

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Cơ sở

CWE-426: Untrusted Search Path Cơ sở

CWE-462: Duplicate Key in Associative List (Alist) Cơ sở

CWE-705: Incorrect Control Flow Scoping Cơ sở

CWE-78: Improper Neutralization of Special Elements used in an OS Command Cơ sở

CWE-88: Improper Neutralization of Argument Delimiters in a Command Cơ sở

CWE-745: CERT C Secure Coding Standard (2008) Chapter 12 - Signals (SIG) Danh mục

CWE-745: Weaknesses in this category are related to the rules and recommendations in the Signals (SIG) chapter of the CERT C Secure Coding Standard (2008).

CWE-479: Signal Handler Use of a Non-reentrant Function Cơ sở

CWE-662: Improper Synchronization Cơ sở

CWE-746: CERT C Secure Coding Standard (2008) Chapter 13 - Error Handling (ERR) Danh mục

CWE-746: Weaknesses in this category are related to the rules and recommendations in the Error Handling (ERR) chapter of the CERT C Secure Coding Standard (2008).

CWE-20: Improper Input Validation Cơ sở

CWE-391: DEPRECATED: Unchecked Error Condition Cơ sở

CWE-544: Missing Standardized Error Handling Mechanism Cơ sở

CWE-676: Use of Potentially Dangerous Function Cơ sở

CWE-705: Incorrect Control Flow Scoping Cơ sở

CWE-747: CERT C Secure Coding Standard (2008) Chapter 14 - Miscellaneous (MSC) Danh mục

CWE-747: Weaknesses in this category are related to the rules and recommendations in the Miscellaneous (MSC) chapter of the CERT C Secure Coding Standard (2008).

CWE-14: Compiler Removal of Code to Clear Buffers Cơ sở

CWE-176: Improper Handling of Unicode Encoding Cơ sở

CWE-20: Improper Input Validation Cơ sở

CWE-330: Use of Insufficiently Random Values Cơ sở

CWE-480: Use of Incorrect Operator Cơ sở

CWE-482: Comparing instead of Assigning Cơ sở

CWE-561: Dead Code Cơ sở

CWE-563: Assignment to Variable without Use Cơ sở

CWE-570: Expression is Always False Cơ sở

CWE-571: Expression is Always True Cơ sở

CWE-697: Incorrect Comparison Cơ sở

CWE-704: Incorrect Type Conversion or Cast Cơ sở

CWE-748: CERT C Secure Coding Standard (2008) Appendix - POSIX (POS) Danh mục

CWE-748: Weaknesses in this category are related to the rules and recommendations in the POSIX (POS) appendix of the CERT C Secure Coding Standard (2008).

CWE-170: Improper Null Termination Cơ sở

CWE-242: Use of Inherently Dangerous Function Cơ sở

CWE-272: Least Privilege Violation Cơ sở

CWE-273: Improper Check for Dropped Privileges Cơ sở

CWE-363: Race Condition Enabling Link Following Cơ sở

CWE-366: Race Condition within a Thread Cơ sở

CWE-562: Return of Stack Variable Address Cơ sở

CWE-59: Improper Link Resolution Before File Access Cơ sở

CWE-667: Improper Locking Cơ sở

CWE-686: Function Call With Incorrect Argument Type Cơ sở

CWE-696: Incorrect Behavior Order Cơ sở

Thông tin chế độ xem CWE

Ghi chú ánh xạ lỗ hổng

Lý do : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Bình luận : Use this View or other Views to search and navigate for the appropriate weakness.

Ghi chú

The relationships in this view were determined based on specific statements within the rules from the standard. Not all rules have direct relationships to individual weaknesses, although they likely have chaining relationships in specific circumstances.

Đối tượng

Bên liên quan	Mô tả
Software Developers	By following the CERT C Secure Coding Standard, developers will be able to fully or partially prevent the weaknesses that are identified in this view. In addition, developers can use a CWE coverage graph to determine which weaknesses are not directly addressed by the standard, which will help identify and resolve remaining gaps in training, tool acquisition, or other approaches for reducing weaknesses.
Product Customers	If a software developer claims to be following the CERT C Secure Coding standard, then customers can search for the weaknesses in this view in order to formulate independent evidence of that claim.
Educators	Educators can use this view in multiple ways. For example, if there is a focus on teaching weaknesses, the educator could link them to the relevant Secure Coding Standard.

Gửi

Tên	Tổ chức	Ngày	Ngày phát hành	Version
CWE Content Team	MITRE	2008-11-24 +00:00	2008-11-24 +00:00	1.1

Sửa đổi

Tên	Tổ chức	Ngày	Bình luận
CWE Content Team	MITRE	2017-11-08 +00:00	updated Description, Maintenance_Notes, Name, References
CWE Content Team	MITRE	2019-01-03 +00:00	updated Description, Name, References
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2021-03-15 +00:00	updated Description, Maintenance_Notes
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

Tài liệu tham khảo

REF-597

The CERT C Secure Coding Standard
Robert C. Seacord.

Chi tiết chế độ xem CWE-734

CWE-734

Tên: Weaknesses Addressed by the CERT C Secure Coding Standard (2008)

Thành viên CWE

CWE-735: CERT C Secure Coding Standard (2008) Chapter 2 - Preprocessor (PRE) Danh mục

CWE-736: CERT C Secure Coding Standard (2008) Chapter 3 - Declarations and Initialization (DCL) Danh mục

CWE-737: CERT C Secure Coding Standard (2008) Chapter 4 - Expressions (EXP) Danh mục

CWE-738: CERT C Secure Coding Standard (2008) Chapter 5 - Integers (INT) Danh mục

CWE-739: CERT C Secure Coding Standard (2008) Chapter 6 - Floating Point (FLP) Danh mục

CWE-740: CERT C Secure Coding Standard (2008) Chapter 7 - Arrays (ARR) Danh mục

CWE-741: CERT C Secure Coding Standard (2008) Chapter 8 - Characters and Strings (STR) Danh mục

CWE-742: CERT C Secure Coding Standard (2008) Chapter 9 - Memory Management (MEM) Danh mục

CWE-743: CERT C Secure Coding Standard (2008) Chapter 10 - Input Output (FIO) Danh mục

CWE-744: CERT C Secure Coding Standard (2008) Chapter 11 - Environment (ENV) Danh mục

CWE-745: CERT C Secure Coding Standard (2008) Chapter 12 - Signals (SIG) Danh mục

CWE-746: CERT C Secure Coding Standard (2008) Chapter 13 - Error Handling (ERR) Danh mục

CWE-747: CERT C Secure Coding Standard (2008) Chapter 14 - Miscellaneous (MSC) Danh mục

CWE-748: CERT C Secure Coding Standard (2008) Appendix - POSIX (POS) Danh mục

Thông tin chế độ xem CWE

Ghi chú ánh xạ lỗ hổng

Ghi chú

Đối tượng

Gửi

Sửa đổi

Tài liệu tham khảo

REF-597