CERT C++ Secure Coding Section 08 - Memory Management (MEM)

Opis

Weaknesses in this category are related to rules in the Memory Management (MEM) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

Wpisy w tej grupie

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
• CWE-128 Wrap-around Error
• CWE-131 Incorrect Calculation of Buffer Size
• CWE-190 Integer Overflow or Wraparound
• CWE-20 Improper Input Validation
• CWE-226 Sensitive Information in Resource Not Removed Before Reuse
• CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')
• CWE-252 Unchecked Return Value
• CWE-391 Unchecked Error Condition
• CWE-404 Improper Resource Shutdown or Release
• CWE-415 Double Free
• CWE-416 Use After Free
• CWE-476 NULL Pointer Dereference
• CWE-528 Exposure of Core Dump File to an Unauthorized Control Sphere
• CWE-590 Free of Memory not on the Heap
• CWE-591 Sensitive Data Storage in Improperly Locked Memory
• CWE-665 Improper Initialization
• CWE-687 Function Call With Incorrectly Specified Argument Value
• CWE-690 Unchecked Return Value to NULL Pointer Dereference
• CWE-703 Improper Check or Handling of Exceptional Conditions
• CWE-754 Improper Check for Unusual or Exceptional Conditions
• CWE-762 Mismatched Memory Management Routines
• CWE-770 Allocation of Resources Without Limits or Throttling
• CWE-822 Untrusted Pointer Dereference

Źródła