CERT C Secure Coding Standard (2008) Chapter 3 - Declarations and Initialization (DCL)

Opis

Weaknesses in this category are related to the rules and recommendations in the Declarations and Initialization (DCL) chapter of the CERT C Secure Coding Standard (2008).

Wpisy w tej grupie

• CWE-547 Use of Hard-coded, Security-relevant Constants
• CWE-628 Function Call with Incorrectly Specified Arguments
• CWE-686 Function Call With Incorrect Argument Type

Uwagi

<xhtml:p>In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:</xhtml:p> <xhtml:ul> <xhtml:li>CWE-547 DCL06-C Use meaningful symbolic constants to represent literal values in program logic</xhtml:li> <xhtml:li>CWE-628 DCL10-C Maintain the contract between the writer and caller of variadic functions</xhtml:li> <xhtml:li>CWE-686 DCL35-C Do not invoke a function using a type that does not match the function definition</xhtml:li> </xhtml:ul>

Źródła