2376
Nature Type ID Name Page
MemberOf 868 Weaknesses Addressed by the SEI CERT C++ Coding
Standard (2016 Version)
868 2566
HasMember 119 Improper Restriction of Operations within the Bounds of
a Memory Buffer
868 293
HasMember 129 Improper Validation of Array Index 868 341
HasMember 467 Use of sizeof() on a Pointer Type 868 1110
HasMember 469 Use of Pointer Subtraction to Determine Size 868 1115
HasMember 665 Improper Initialization 868 1456
HasMember 805 Buffer Access with Incorrect Length Value 868 1702
References
[REF-853]CERT. "06. Arrays and the STL (ARR)". < https://www.securecoding.cert.org/confluence/
display/cplusplus/06.+Arrays+and+the+STL+%28ARR%29 >.
Category-875: CERT C++ Secure Coding Section 07 - Characters and Strings
(STR)
Category ID : 875
Summary
Weaknesses in this category are related to rules in the Characters and Strings (STR) section of the
CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category
may be incomplete.
Membership
Nature Type ID Name Page
MemberOf 868 Weaknesses Addressed by the SEI CERT C++ Coding
Standard (2016 Version)
868 2566
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
868 151
HasMember 88 Improper Neutralization of Argument Delimiters in a
Command ('Argument Injection')
868 194
HasMember 119 Improper Restriction of Operations within the Bounds of
a Memory Buffer
868 293
HasMember 120 Buffer Copy without Checking Size of Input ('Classic
Buffer Overflow')
868 304
HasMember 170 Improper Null Termination 868 428
HasMember 193 Off-by-one Error 868 486
HasMember 464 Addition of Data Structure Sentinel 868 1107
HasMember 686 Function Call With Incorrect Argument Type 868 1508
HasMember 704 Incorrect Type Conversion or Cast 868 1538
References
[REF-854]CERT. "07. Characters and Strings (STR)". < https://www.securecoding.cert.org/
confluence/display/cplusplus/07.+Characters+and+Strings+%28STR%29 >.
Category-876: CERT C++ Secure Coding Section 08 - Memory Management
(MEM)
Category ID : 876
CWE Version 4.14
CWE-877: CERT C++ Secure Coding Section 09 - Input Output (FIO)
CWE-877: CERT C++ Secure Coding Section 09 - Input Output (FIO)