CERT C Secure Coding Standard (2008) Chapter 14 - Miscellaneous (MSC)

Opis

Weaknesses in this category are related to the rules and recommendations in the Miscellaneous (MSC) chapter of the CERT C Secure Coding Standard (2008).

Wpisy w tej grupie

• CWE-14 Compiler Removal of Code to Clear Buffers
• CWE-176 Improper Handling of Unicode Encoding
• CWE-20 Improper Input Validation
• CWE-330 Use of Insufficiently Random Values
• CWE-480 Use of Incorrect Operator
• CWE-482 Comparing instead of Assigning
• CWE-561 Dead Code
• CWE-563 Assignment to Variable without Use
• CWE-570 Expression is Always False
• CWE-571 Expression is Always True
• CWE-697 Incorrect Comparison
• CWE-704 Incorrect Type Conversion or Cast

Uwagi

<xhtml:p>In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:</xhtml:p> <xhtml:ul> <xhtml:li>CWE-14 MSC06-C Be aware of compiler optimization when dealing with sensitive data</xhtml:li> <xhtml:li>CWE-20 MSC08-C Library functions should validate their parameters</xhtml:li> <xhtml:li>CWE-176 MSC10-C Character Encoding - UTF8 Related Issues</xhtml:li> <xhtml:li>CWE-330 MSC30-C Do not use the rand() function for generating pseudorandom numbers</xhtml:li> <xhtml:li>CWE-480 MSC02-C Avoid errors of omission</xhtml:li> <xhtml:li>CWE-480 MSC03-C Avoid errors of addition</xhtml:li> <xhtml:li>CWE-482 MSC02-C Avoid errors of omission</xhtml:li> <xhtml:li>CWE-561 MSC07-C Detect and remove dead code</xhtml:li> <xhtml:li>CWE-563 MSC00-C Compile cleanly at high warning levels</xhtml:li> <xhtml:li>CWE-570 MSC00-C Compile cleanly at high warning levels</xhtml:li> <xhtml:li>CWE-571 MSC00-C Compile cleanly at high warning levels</xhtml:li> <xhtml:li>CWE-697 MSC31-C Ensure that return values are compared against the proper type</xhtml:li> <xhtml:li>CWE-704 MSC31-C Ensure that return values are compared against the proper type</xhtml:li> <xhtml:li>CWE-758 MSC14-C Do not introduce unnecessary platform dependencies</xhtml:li> <xhtml:li>CWE-758 MSC15-C Do not depend on undefined behavior</xhtml:li> </xhtml:ul>

Źródła