CERT C Secure Coding Standard (2008) Chapter 13 - Error Handling (ERR)

Opis

Weaknesses in this category are related to the rules and recommendations in the Error Handling (ERR) chapter of the CERT C Secure Coding Standard (2008).

Wpisy w tej grupie

• CWE-20 Improper Input Validation
• CWE-391 Unchecked Error Condition
• CWE-544 Missing Standardized Error Handling Mechanism
• CWE-676 Use of Potentially Dangerous Function
• CWE-705 Incorrect Control Flow Scoping

Uwagi

<xhtml:p>In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:</xhtml:p> <xhtml:ul> <xhtml:li>CWE-20 ERR07-C Prefer functions that support error checking over equivalent functions that don't</xhtml:li> <xhtml:li>CWE-391 ERR00-C Adopt and implement a consistent and comprehensive error-handling policy</xhtml:li> <xhtml:li>CWE-544 ERR00-C Adopt and implement a consistent and comprehensive error-handling policy</xhtml:li> <xhtml:li>CWE-676 ERR07-C Prefer functions that support error checking over equivalent functions that don't</xhtml:li> <xhtml:li>CWE-705 ERR04-C Choose an appropriate termination strategy</xhtml:li> </xhtml:ul>

Źródła