2378
Weaknesses in this category are related to rules in the Input Output (FIO) section of the CERT C+
+ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be
incomplete.
Membership
Nature Type ID Name Page
MemberOf 868 Weaknesses Addressed by the SEI CERT C++ Coding
Standard (2016 Version)
868 2566
HasMember 22 Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal')
868 33
HasMember 37 Path Traversal: '/absolute/pathname/here' 868 79
HasMember 38 Path Traversal: '\absolute\pathname\here' 868 80
HasMember 39 Path Traversal: 'C:dirname' 868 82
HasMember 41 Improper Resolution of Path Equivalence 868 86
HasMember 59 Improper Link Resolution Before File Access ('Link
Following')
868 111
HasMember 62 UNIX Hard Link 868 119
HasMember 64 Windows Shortcut Following (.LNK) 868 121
HasMember 65 Windows Hard Link 868 123
HasMember 67 Improper Handling of Windows Device Names 868 126
HasMember 73 External Control of File Name or Path 868 132
HasMember 119 Improper Restriction of Operations within the Bounds of
a Memory Buffer
868 293
HasMember 134 Use of Externally-Controlled Format String 868 365
HasMember 241 Improper Handling of Unexpected Data Type 868 584
HasMember 276 Incorrect Default Permissions 868 665
HasMember 279 Incorrect Execution-Assigned Permissions 868 671
HasMember 362 Concurrent Execution using Shared Resource with
Improper Synchronization ('Race Condition')
868 888
HasMember 367 Time-of-check Time-of-use (TOCTOU) Race Condition 868 906
HasMember 379 Creation of Temporary File in Directory with Insecure
Permissions
868 930
HasMember 391 Unchecked Error Condition 868 948
HasMember 403 Exposure of File Descriptor to Unintended Control
Sphere ('File Descriptor Leak')
868 978
HasMember 404 Improper Resource Shutdown or Release 868 980
HasMember 552 Files or Directories Accessible to External Parties 868 1265
HasMember 675 Multiple Operations on Resource in Single-Operation
Context
868 1487
HasMember 676 Use of Potentially Dangerous Function 868 1489
HasMember 732 Incorrect Permission Assignment for Critical Resource 868 1551
HasMember 770 Allocation of Resources Without Limits or Throttling 868 1613
References
[REF-856]CERT. "09. Input Output (FIO)". < https://www.securecoding.cert.org/confluence/display/
cplusplus/09.+Input+Output+%28FIO%29 >.
Category-878: CERT C++ Secure Coding Section 10 - Environment (ENV)
Category ID : 878
CWE Version 4.14
CWE-879: CERT C++ Secure Coding Section 11 - Signals (SIG)
CWE-879: CERT C++ Secure Coding Section 11 - Signals (SIG)