2351
Nature Type ID Name Page
HasMember 482 Comparing instead of Assigning 734 1157
HasMember 561 Dead Code 734 1275
HasMember 563 Assignment to Variable without Use 734 1280
HasMember 570 Expression is Always False 734 1292
HasMember 571 Expression is Always True 734 1295
HasMember 697 Incorrect Comparison 734 1530
HasMember 704 Incorrect Type Conversion or Cast 734 1538
Notes
Relationship
In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to
the following CWE IDs: CWE-14 MSC06-C Be aware of compiler optimization when dealing with
sensitive data CWE-20 MSC08-C Library functions should validate their parameters CWE-176
MSC10-C Character Encoding - UTF8 Related Issues CWE-330 MSC30-C Do not use the
rand() function for generating pseudorandom numbers CWE-480 MSC02-C Avoid errors of
omission CWE-480 MSC03-C Avoid errors of addition CWE-482 MSC02-C Avoid errors of
omission CWE-561 MSC07-C Detect and remove dead code CWE-563 MSC00-C Compile
cleanly at high warning levels CWE-570 MSC00-C Compile cleanly at high warning levels
CWE-571 MSC00-C Compile cleanly at high warning levels CWE-697 MSC31-C Ensure that
return values are compared against the proper type CWE-704 MSC31-C Ensure that return
values are compared against the proper type CWE-758 MSC14-C Do not introduce unnecessary
platform dependencies CWE-758 MSC15-C Do not depend on undefined behavior
References
[REF-597]Robert C. Seacord. "The CERT C Secure Coding Standard". 1st Edition. 2008 October
4. Addison-Wesley Professional.
Category-748: CERT C Secure Coding Standard (2008) Appendix - POSIX
(POS)
Category ID : 748
Summary
Weaknesses in this category are related to the rules and recommendations in the POSIX (POS)
appendix of the CERT C Secure Coding Standard (2008).
Membership
Nature Type ID Name Page
MemberOf 734 Weaknesses Addressed by the CERT C Secure Coding
Standard (2008)
734 2560
HasMember 59 Improper Link Resolution Before File Access ('Link
Following')
734 111
HasMember 170 Improper Null Termination 734 428
HasMember 242 Use of Inherently Dangerous Function 734 586
HasMember 272 Least Privilege Violation 734 656
HasMember 273 Improper Check for Dropped Privileges 734 660
HasMember 363 Race Condition Enabling Link Following 734 897
HasMember 366 Race Condition within a Thread 734 904
HasMember 562 Return of Stack Variable Address 734 1278
HasMember 667 Improper Locking 734 1464
CWE Version 4.14
CWE-751: 2009 Top 25 - Insecure Interaction Between Components
CWE-751: 2009 Top 25 - Insecure Interaction Between Components