CERT C Secure Coding Standard (2008) Chapter 4 - Expressions (EXP)

Opis

Weaknesses in this category are related to the rules and recommendations in the Expressions (EXP) chapter of the CERT C Secure Coding Standard (2008).

Wpisy w tej grupie

• CWE-467 Use of sizeof() on a Pointer Type
• CWE-468 Incorrect Pointer Scaling
• CWE-476 NULL Pointer Dereference
• CWE-628 Function Call with Incorrectly Specified Arguments
• CWE-704 Incorrect Type Conversion or Cast
• CWE-783 Operator Precedence Logic Error

Uwagi

<xhtml:p>In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:</xhtml:p> <xhtml:ul> <xhtml:li>CWE-467 EXP01-C Do not take the size of a pointer to determine the size of the pointed-to type</xhtml:li> <xhtml:li>CWE-468 EXP08-C Ensure pointer arithmetic is used correctly</xhtml:li> <xhtml:li>CWE-476 EXP34-C Ensure a null pointer is not dereferenced</xhtml:li> <xhtml:li>CWE-628 EXP37-C Call functions with the arguments intended by the API</xhtml:li> <xhtml:li>CWE-704 EXP05-C Do not cast away a const qualification</xhtml:li> <xhtml:li>CWE-783 EXP00-C Use parentheses for precedence of operation</xhtml:li> </xhtml:ul>

Źródła