...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
MSC30MSC50-CPP | Medium | Unlikely | Low | P6 | L2 |
...
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| BADFUNC.RANDOM.RAND | Use of rand | ||||||
|
|
| |||||||
| CC2.MSC30 | Fully implemented | |||||||
|
|
| |||||||
|
|
| |||||||
| PRQA QA-C |
| Warncall -wc rand | Fully implemented |
...
| CERT C++ Coding Standard | MSC51-CPP. Ensure your random number generator is properly seeded |
| CERT C Coding Standard | MSC30-C. Do not use the rand() function for generating pseudorandom numbers |
| CERT Oracle Secure Coding Standard for Java | MSC02-J. Generate strong random numbers |
| MITRE CWE | CWE-327, Use of a Broken or Risky Cryptographic Algorithm CWE-330, Use of Insufficiently Random Values |
...