2379
Summary
Weaknesses in this category are related to rules in the Environment (ENV) section of the CERT C
++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be
incomplete.
Membership
Nature Type ID Name Page
MemberOf 868 Weaknesses Addressed by the SEI CERT C++ Coding
Standard (2016 Version)
868 2566
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
868 151
HasMember 88 Improper Neutralization of Argument Delimiters in a
Command ('Argument Injection')
868 194
HasMember 119 Improper Restriction of Operations within the Bounds of
a Memory Buffer
868 293
HasMember 426 Untrusted Search Path 868 1028
HasMember 462 Duplicate Key in Associative List (Alist) 868 1104
HasMember 705 Incorrect Control Flow Scoping 868 1542
HasMember 807 Reliance on Untrusted Inputs in a Security Decision 868 1714
References
[REF-857]CERT. "10. Environment (ENV)". < https://www.securecoding.cert.org/confluence/
display/cplusplus/10.+Environment+%28ENV%29 >.
Category-879: CERT C++ Secure Coding Section 11 - Signals (SIG)
Category ID : 879
Summary
Weaknesses in this category are related to rules in the Signals (SIG) section of the CERT C++
Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be
incomplete.
Membership
Nature Type ID Name Page
MemberOf 868 Weaknesses Addressed by the SEI CERT C++ Coding
Standard (2016 Version)
868 2566
HasMember 479 Signal Handler Use of a Non-reentrant Function 868 1147
HasMember 662 Improper Synchronization 868 1448
References
[REF-858]CERT. "11. Signals (SIG)". < https://www.securecoding.cert.org/confluence/display/
cplusplus/11.+Signals+%28SIG%29 >.
Category-880: CERT C++ Secure Coding Section 12 - Exceptions and Error
Handling (ERR)
Category ID : 880
Summary
CWE Version 4.14
CWE-881: CERT C++ Secure Coding Section 13 - Object Oriented Programming (OOP)
CWE-881: CERT C++ Secure Coding Section
13 - Object Oriented Programming (OOP) 2380
Weaknesses in this category are related to rules in the Exceptions and Error Handling (ERR)
section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses,
this category may be incomplete.
Membership
Nature Type ID Name Page
MemberOf 868 Weaknesses Addressed by the SEI CERT C++ Coding
Standard (2016 Version)
868 2566
HasMember 209 Generation of Error Message Containing Sensitive
Information
868 533
HasMember 390 Detection of Error Condition Without Action 868 943
HasMember 391 Unchecked Error Condition 868 948
HasMember 460 Improper Cleanup on Thrown Exception 868 1102
HasMember 497 Exposure of Sensitive System Information to an
Unauthorized Control Sphere
868 1193
HasMember 544 Missing Standardized Error Handling Mechanism 868 1256
HasMember 703 Improper Check or Handling of Exceptional Conditions 868 1535
HasMember 705 Incorrect Control Flow Scoping 868 1542
HasMember 754 Improper Check for Unusual or Exceptional Conditions 868 1568
HasMember 755 Improper Handling of Exceptional Conditions 868 1576
References
[REF-861]CERT. "12. Exceptions and Error Handling (ERR)". < https://www.securecoding.cert.org/
confluence/display/cplusplus/12.+Exceptions+and+Error+Handling+%28ERR%29 >.
Category-881: CERT C++ Secure Coding Section 13 - Object Oriented
Programming (OOP)
Category ID : 881
Summary
Weaknesses in this category are related to rules in the Object Oriented Programming (OOP)
section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses,
this category may be incomplete.
Membership
Nature Type ID Name Page
MemberOf 868 Weaknesses Addressed by the SEI CERT C++ Coding
Standard (2016 Version)
868 2566
References
[REF-862]CERT. "13. Object Oriented Programming (OOP)". < https://www.securecoding.cert.org/
confluence/display/cplusplus/13.+Object+Oriented+Programming+%28OOP%29 >.
Category-882: CERT C++ Secure Coding Section 14 - Concurrency (CON)
Category ID : 882
Summary
CWE Version 4.14
CWE-883: CERT C++ Secure Coding Section 49 - Miscellaneous (MSC)
CWE-883: CERT C++ Secure Coding Section 49 - Miscellaneous (MSC)