2377
Summary
Weaknesses in this category are related to rules in the Memory Management (MEM) section of the
CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category
may be incomplete.
Membership
Nature Type ID Name Page
MemberOf 868 Weaknesses Addressed by the SEI CERT C++ Coding
Standard (2016 Version)
868 2566
HasMember 20 Improper Input Validation 868 20
HasMember 119 Improper Restriction of Operations within the Bounds of
a Memory Buffer
868 293
HasMember 128 Wrap-around Error 868 339
HasMember 131 Incorrect Calculation of Buffer Size 868 355
HasMember 190 Integer Overflow or Wraparound 868 472
HasMember 226 Sensitive Information in Resource Not Removed Before
Reuse
868 562
HasMember 244 Improper Clearing of Heap Memory Before Release
('Heap Inspection')
868 591
HasMember 252 Unchecked Return Value 868 606
HasMember 391 Unchecked Error Condition 868 948
HasMember 404 Improper Resource Shutdown or Release 868 980
HasMember 415 Double Free 868 1008
HasMember 416 Use After Free 868 1012
HasMember 476 NULL Pointer Dereference 868 1132
HasMember 528 Exposure of Core Dump File to an Unauthorized Control
Sphere
868 1237
HasMember 590 Free of Memory not on the Heap 868 1326
HasMember 591 Sensitive Data Storage in Improperly Locked Memory 868 1329
HasMember 665 Improper Initialization 868 1456
HasMember 687 Function Call With Incorrectly Specified Argument Value 868 1510
HasMember 690 Unchecked Return Value to NULL Pointer Dereference 868 1514
HasMember 703 Improper Check or Handling of Exceptional Conditions 868 1535
HasMember 754 Improper Check for Unusual or Exceptional Conditions 868 1568
HasMember 762 Mismatched Memory Management Routines 868 1596
HasMember 770 Allocation of Resources Without Limits or Throttling 868 1613
HasMember 822 Untrusted Pointer Dereference 868 1723
References
[REF-855]CERT. "08. Memory Management (MEM)". < https://www.securecoding.cert.org/
confluence/display/cplusplus/08.+Memory+Management+%28MEM%29 >.
Category-877: CERT C++ Secure Coding Section 09 - Input Output (FIO)
Category ID : 877
Summary
CWE Version 4.14
CWE-878: CERT C++ Secure Coding Section 10 - Environment (ENV)
CWE-878: CERT C++ Secure Coding Section 10 - Environment (ENV)