CERT Rule | Related Guidelines |
|---|---|
| CTR50-CPP | CWE 119, Failure to Constrain Operations within the Bounds of a Memory Buffer |
| CTR50-CPP | CWE 129, Improper Validation of Array Index |
| CTR52-CPP | CWE 119, Failure to Constrain Operations within the Bounds of an Allocated Memory Buffer |
| CTR52-CPP | CWE 805, Buffer Access with Incorrect Length Value |
| CTR54-CPP | CWE-469, Use of Pointer Subtraction to Determine Size |
| CTR55-CPP | CWE 129, Unchecked Array Indexing |
| MEM50-CPP | CWE-415, Double Free |
| MEM50-CPP | CWE-416, Use After Free |
| MEM51-CPP | CWE 590, Free of Memory Not on the Heap |
| MEM51-CPP | CWE 415, Double Free |
| MEM51-CPP | CWE 404, Improper Resource Shutdown or Release CWE 762, Mismatched Memory Management Routines |
| MEM52-CPP | CWE 252, Unchecked Return Value |
| MEM52-CPP | CWE 391, Unchecked Error Condition |
| MEM52-CPP | CWE 476, NULL Pointer Dereference |
| MEM52-CPP | CWE 690, Unchecked Return Value to NULL Pointer Dereference |
| MEM52-CPP | CWE 703, Improper Check or Handling of Exceptional Conditions |
| MEM52-CPP | |
| MEM52-CPP | CWE 754, Improper Check for Unusual or Exceptional Conditions |
| MEM56-CPP | CWE-415, Double Free |
| MEM56-CPP | CWE-416, Use After Free |
| MEM56-CPP | CWE 762, Mismatched Memory Management Routines |
| ERR50-CPP | CWE-754, Improper Check for Unusual or Exceptional Conditions |
| ERR51-CPP | CWE-754, Improper Check for Unusual or Exceptional Conditions |
| ERR56-CPP | CWE-703, Failure to Handle Exceptional Conditions |
| ERR56-CPP | CWE-754, Improper Check for Unusual or Exceptional Conditions |
| ERR56-CPP | CWE-755, Improper Handling of Exceptional Conditions |
| CON50-CPP | CWE-667, Improper Locking |
| CON51-CPP | CWE-667, Improper Locking |
| CON53-CPP | CWE-764, Multiple Locks of a Critical Resource |
| CON56-CPP | CWE-667, Improper Locking |
| MSC50-CPP | CWE-327, Use of a Broken or Risky Cryptographic Algorithm |
| MSC50-CPP | CWE-330, Use of Insufficiently Random Values |
| MSC51-CPP | CWE-327, Use of a Broken or Risky Cryptographic Algorithm |
| MSC51-CPP | CWE-330, Use of Insufficiently Random Values CWE-337, Predictable Seed in PRNG |
| FIO21-CPP | CWE-362, Concurrent Execution Using Shared Resource with Improper Synchronization ("Race Condition") |
| FIO21-CPP | CWE-675, Duplicate Operations on Resource |