CERT C++ Secure Coding Section 07 - Characters and Strings (STR)

Opis

Weaknesses in this category are related to rules in the Characters and Strings (STR) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

Wpisy w tej grupie

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
• CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
• CWE-170 Improper Null Termination
• CWE-193 Off-by-one Error
• CWE-464 Addition of Data Structure Sentinel
• CWE-686 Function Call With Incorrect Argument Type
• CWE-704 Incorrect Type Conversion or Cast
• CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Źródła