2349
Nature Type ID Name Page
HasMember 705 Incorrect Control Flow Scoping 734 1542
Notes
Relationship
In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped
to the following CWE IDs: CWE-78 ENV03-C Sanitize the environment when invoking external
programs CWE-78 ENV04-C Do not call system() if you do not need a command processor
CWE-88 ENV03-C Sanitize the environment when invoking external programs CWE-88 ENV04-
C Do not call system() if you do not need a command processor CWE-119 ENV01-C Do not
make assumptions about the size of an environment variable CWE-426 ENV03-C Sanitize
the environment when invoking external programs CWE-462 ENV02-C Beware of multiple
environment variables with the same effective name CWE-705 ENV32-C All atexit handlers must
return normally
References
[REF-597]Robert C. Seacord. "The CERT C Secure Coding Standard". 1st Edition. 2008 October
4. Addison-Wesley Professional.
Category-745: CERT C Secure Coding Standard (2008) Chapter 12 - Signals
(SIG)
Category ID : 745
Summary
Weaknesses in this category are related to the rules and recommendations in the Signals (SIG)
chapter of the CERT C Secure Coding Standard (2008).
Membership
Nature Type ID Name Page
MemberOf 734 Weaknesses Addressed by the CERT C Secure Coding
Standard (2008)
734 2560
HasMember 479 Signal Handler Use of a Non-reentrant Function 734 1147
HasMember 662 Improper Synchronization 734 1448
Notes
Relationship
In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped
to the following CWE IDs: CWE-432 SIG00-C Mask signals handled by noninterruptible signal
handlers CWE-479 SIG30-C Call only asynchronous-safe functions within signal handlers
CWE-479 SIG32-C Do not call longjmp() from inside a signal handler CWE-479 SIG33-C Do
not recursively invoke the raise() function CWE-479 SIG34-C Do not call signal() from within
interruptible signal handlers CWE-662 SIG00-C Mask signals handled by noninterruptible
signal handlers CWE-662 SIG31-C Do not access or modify shared objects in signal handlers
CWE-828 SIG31-C Do not access or modify shared objects in signal handlers
References
[REF-597]Robert C. Seacord. "The CERT C Secure Coding Standard". 1st Edition. 2008 October
4. Addison-Wesley Professional.
CWE Version 4.14
CWE-746: CERT C Secure Coding Standard (2008) Chapter 13 - Error Handling (ERR)
CWE-746: CERT C Secure Coding Standard
(2008) Chapter 13 - Error Handling (ERR) 2350
Category-746: CERT C Secure Coding Standard (2008) Chapter 13 - Error
Handling (ERR)
Category ID : 746
Summary
Weaknesses in this category are related to the rules and recommendations in the Error Handling
(ERR) chapter of the CERT C Secure Coding Standard (2008).
Membership
Nature Type ID Name Page
MemberOf 734 Weaknesses Addressed by the CERT C Secure Coding
Standard (2008)
734 2560
HasMember 20 Improper Input Validation 734 20
HasMember 391 Unchecked Error Condition 734 948
HasMember 544 Missing Standardized Error Handling Mechanism 734 1256
HasMember 676 Use of Potentially Dangerous Function 734 1489
HasMember 705 Incorrect Control Flow Scoping 734 1542
Notes
Relationship
In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped
to the following CWE IDs: CWE-20 ERR07-C Prefer functions that support error checking over
equivalent functions that don't CWE-391 ERR00-C Adopt and implement a consistent and
comprehensive error-handling policy CWE-544 ERR00-C Adopt and implement a consistent
and comprehensive error-handling policy CWE-676 ERR07-C Prefer functions that support
error checking over equivalent functions that don't CWE-705 ERR04-C Choose an appropriate
termination strategy
References
[REF-597]Robert C. Seacord. "The CERT C Secure Coding Standard". 1st Edition. 2008 October
4. Addison-Wesley Professional.
Category-747: CERT C Secure Coding Standard (2008) Chapter 14 -
Miscellaneous (MSC)
Category ID : 747
Summary
Weaknesses in this category are related to the rules and recommendations in the Miscellaneous
(MSC) chapter of the CERT C Secure Coding Standard (2008).
Membership
Nature Type ID Name Page
MemberOf 734 Weaknesses Addressed by the CERT C Secure Coding
Standard (2008)
734 2560
HasMember 14 Compiler Removal of Code to Clear Buffers 734 14
HasMember 20 Improper Input Validation 734 20
HasMember 176 Improper Handling of Unicode Encoding 734 440
HasMember 330 Use of Insufficiently Random Values 734 814
HasMember 480 Use of Incorrect Operator 734 1150
CWE Version 4.14
CWE-748: CERT C Secure Coding Standard (2008) Appendix - POSIX (POS)
CWE-748: CERT C Secure Coding Standard (2008) Appendix - POSIX (POS)