SEI CERT C Coding Standard - Guidelines 09. Input Output (FIO)

Opis

Weaknesses in this category are related to the rules and recommendations in the Input Output (FIO) section of the SEI CERT C Coding Standard.

Wpisy w tej grupie

• CWE-134 Use of Externally-Controlled Format String
• CWE-20 Improper Input Validation
• CWE-67 Improper Handling of Windows Device Names
• CWE-197 Numeric Truncation Error
• CWE-241 Improper Handling of Unexpected Data Type
• CWE-664 Improper Control of a Resource Through its Lifetime
• CWE-404 Improper Resource Shutdown or Release
• CWE-459 Incomplete Cleanup
• CWE-772 Missing Release of Resource after Effective Lifetime
• CWE-773 Missing Reference to Active File Descriptor or Handle
• CWE-775 Missing Release of File Descriptor or Handle after Effective Lifetime
• CWE-771 Missing Reference to Active Allocated Resource
• CWE-910 Use of Expired File Descriptor
• CWE-666 Operation on Resource in Wrong Phase of Lifetime
• CWE-672 Operation on a Resource after Expiration or Release
• CWE-758 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
• CWE-686 Function Call With Incorrect Argument Type
• CWE-685 Function Call With Incorrect Number of Arguments

Źródła