SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 80

changes.mady.by.user Todd Nowacki

Saved on

compared with

New Version 81

changes.mady.by.user Todd Nowacki

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Related Vulnerabilities

CVE-2006-6969

Other Languages

This rule appears in the C Secure Coding Standard as

This rule appears in the C++ Secure Coding Standard as

Related Guidelines

 

MSC30-C. Do not use the rand() function for generating pseudorandom numbers

MITRE CWE

CWE ID 327, "Use of a Broken or Risky Cryptographic Algorithm"

CERT C Secure Coding Standard

CWE ID 330, "Use of Insufficiently Random Values"

CERT C++ Secure Coding Standard

MSC30-CPP. Do not use the rand() function for generating pseudorandom numbers

 

CWE ID 332, "Insufficient Entropy in PRNG"

 

CWE ID 333, "Improper Handling of Insufficient Entropy in TRNG"

 

CWE ID 336, "Same Seed in PRNG"

 

CWE ID 337, "Predictable Seed in PRNG"

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="0130eb7e9ed46a5a-da81a18e-405d4946-95f0a80b-192015086fd3a381791c6938"><ac:plain-text-body><![CDATA[

[[API 2006

https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-API06]] 

[Class Random

http://java.sun.com/javase/6/docs/api/java/util/Random.html]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="12cc466ec309a3a8-01f0911c-4d1b4c73-94549895-faae7ed9bfeca5fbb445f58f"><ac:plain-text-body><![CDATA[

[[API 2006

https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-API06]]

[Class SecureRandom

http://java.sun.com/javase/6/docs/api/java/security/SecureRandom.html]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="6877a3556564496b-d558a51c-4f4a4801-b04f98d4-e079af925a2cbf0dca0a3d0e"><ac:plain-text-body><![CDATA[

[[Find Bugs 2008

https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-FindBugs08]]

BC: Random objects created and used only once

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="fbb913fdf35ac8b3-f36e1d50-46234e87-a1fb9307-1c9b80e55ee2db30c448c6a7"><ac:plain-text-body><![CDATA[

[[Monsch 2006

AA. Bibliography#Monsch 06]]

 

]]></ac:plain-text-body></ac:structured-macro>

...