CERT C Secure Coding Standard (2008) Chapter 12 - Signals (SIG)

Opis

Weaknesses in this category are related to the rules and recommendations in the Signals (SIG) chapter of the CERT C Secure Coding Standard (2008).

Wpisy w tej grupie

• CWE-479 Signal Handler Use of a Non-reentrant Function
• CWE-662 Improper Synchronization

Uwagi

<xhtml:p>In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:</xhtml:p> <xhtml:ul> <xhtml:li>CWE-432 SIG00-C Mask signals handled by noninterruptible signal handlers</xhtml:li> <xhtml:li>CWE-479 SIG30-C Call only asynchronous-safe functions within signal handlers</xhtml:li> <xhtml:li>CWE-479 SIG32-C Do not call longjmp() from inside a signal handler</xhtml:li> <xhtml:li>CWE-479 SIG33-C Do not recursively invoke the raise() function</xhtml:li> <xhtml:li>CWE-479 SIG34-C Do not call signal() from within interruptible signal handlers</xhtml:li> <xhtml:li>CWE-662 SIG00-C Mask signals handled by noninterruptible signal handlers</xhtml:li> <xhtml:li>CWE-662 SIG31-C Do not access or modify shared objects in signal handlers</xhtml:li> <xhtml:li>CWE-828 SIG31-C Do not access or modify shared objects in signal handlers</xhtml:li> </xhtml:ul>

Źródła