CERT Secure Coding

Space shortcuts

Space Tools

An 'undefined' page is any page that has been linked to from within Confluence, but that does not yet exist.

  1. Prev
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. 7
  9. Next
Undefined Page Linked From
-64, 63\ Comment: INT08-C. Verify that all integer values are in range > Re: INT08-C. Verify that all integer values are in range (SEI CERT C Coding Standard)
0\ Comment: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator > Re: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator (SEI CERT C Coding Standard)
Comment: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator > Re: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator (SEI CERT C Coding Standard)
Comment: ENV30-C. Do not modify the object referenced by the return value of certain functions > Re: ENV30-C. Do not modify the object referenced by the return value of certain functions (SEI CERT C Coding Standard)
Comment: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator > Re: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator (SEI CERT C Coding Standard)
Comment: ARR01-C. Do not apply the sizeof operator to a pointer when taking the size of an array > Re: ARR01-C. Do not apply the sizeof operator to a pointer when taking the size of an array (SEI CERT C Coding Standard)
1 Comment: MEM33-C. Allocate and copy structures containing a flexible array member dynamically > Re: MEM33-C. Allocate and copy structures containing a flexible array member dynamically (SEI CERT C Coding Standard)
10 Comment: EXP05-C. Do not cast away a const qualification > Re: EXP05-C. Do not cast away a const qualification (SEI CERT C Coding Standard)
1024\ Comment: POS34-C. Do not call putenv() with a pointer to an automatic variable as the argument > Re: POS34-C. Do not call putenv() with a pointer to an automatic variable as the argument (SEI CERT C Coding Standard)
Comment: POS34-C. Do not call putenv() with a pointer to an automatic variable as the argument > Re: POS34-C. Do not call putenv() with a pointer to an automatic variable as the argument (SEI CERT C Coding Standard)
10\ Comment: VOID EXP01-C. Do not take the size of a pointer to determine the size of the pointed-to type > Re: VOID EXP01-C. Do not take the size of a pointer to determine the size of the pointed-to type (SEI CERT C Coding Standard)
1234 Comment: EXP09-C. Use sizeof to determine the size of a type or variable > Re: EXP09-C. Use sizeof to determine the size of a type or variable (SEI CERT C Coding Standard)
12345678 Comment: EXP09-C. Use sizeof to determine the size of a type or variable > Re: EXP09-C. Use sizeof to determine the size of a type or variable (SEI CERT C Coding Standard)
1\ Comment: MEM33-C. Allocate and copy structures containing a flexible array member dynamically > Re: MEM33-C. Allocate and copy structures containing a flexible array member dynamically (SEI CERT C Coding Standard)
Comment: FIO17-C. Do not rely on an ending null character when using fread() > Re: FIO17-C. Do not rely on an ending null character when using fread() (SEI CERT C Coding Standard)
200\ Comment: VOID EXP01-C. Do not take the size of a pointer to determine the size of the pointed-to type > Re: VOID EXP01-C. Do not take the size of a pointer to determine the size of the pointed-to type (SEI CERT C Coding Standard)
2010 CWE SANS Top 25 Most Dangerous Programming Errors Comment: VOID 2009 CWE SANS Top 25 Most Dangerous Programming Errors > Re: VOID 2009 CWE SANS Top 25 Most Dangerous Programming Errors (SEI CERT C Coding Standard)
3 Comment: DCL03-C. Use a static assertion to test the value of a constant expression > Re: DCL03-C. Use a static assertion to test the value of a constant expression (SEI CERT C Coding Standard)
4 Comment: DCL03-C. Use a static assertion to test the value of a constant expression > Re: DCL03-C. Use a static assertion to test the value of a constant expression (SEI CERT C Coding Standard)
6\ Comment: EXP35-C. Do not modify objects with temporary lifetime > Re: EXP35-C. Do not modify objects with temporary lifetime (SEI CERT C Coding Standard)
API05-C. Support compile-time checking Comment: Rule 13. Application Programming Interfaces (API) > Re: Rule 13. Application Programming Interfaces (API) (SEI CERT C Coding Standard)
API06-C. Make failures obvious Comment: Rule 13. Application Programming Interfaces (API) > Re: Rule 13. Application Programming Interfaces (API) (SEI CERT C Coding Standard)
ARM system Developer's Guide\ Comment: EXP03-C. Do not assume the size of a structure is the sum of the sizes of its members > Re: EXP03-C. Do not assume the size of a structure is the sum of the sizes of its members (SEI CERT C Coding Standard)
BB. Definitions\ Comment: SIG00-C. Mask signals handled by noninterruptible signal handlers > Re: SIG00-C. Mask signals handled by noninterruptible signal handlers (SEI CERT C Coding Standard)
CA-1995-14 Comment: ENV03-C. Sanitize the environment when invoking external programs > Re: ENV03-C. Sanitize the environment when invoking external programs (SEI CERT C Coding Standard)
CERT C Secure Coding Standard Page: void MEMxx-C. Understand how flexible array members are to be used (CInternalTest)
Page: void MEMxx-C. Understand how flexible array members are to be used (SEI CERT C Coding Standard)
Page: void MEMxx-C. Understand how flexible array members are to be used (CInternalTest2)
comment updated - the original version had some muddled thinking about rand_r()\ Comment: CON33-C. Avoid race conditions when using library functions > Re: CON33-C. Avoid race conditions when using library functions (SEI CERT C Coding Standard)
-64, 63\ Comment: INT08-C. Verify that all integer values are in range > Re: INT08-C. Verify that all integer values are in range (SEI CERT C Coding Standard)
0\ Comment: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator > Re: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator (SEI CERT C Coding Standard)
Comment: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator > Re: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator (SEI CERT C Coding Standard)
Comment: ENV30-C. Do not modify the object referenced by the return value of certain functions > Re: ENV30-C. Do not modify the object referenced by the return value of certain functions (SEI CERT C Coding Standard)
Comment: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator > Re: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator (SEI CERT C Coding Standard)
Comment: ARR01-C. Do not apply the sizeof operator to a pointer when taking the size of an array > Re: ARR01-C. Do not apply the sizeof operator to a pointer when taking the size of an array (SEI CERT C Coding Standard)
1 Comment: MEM33-C. Allocate and copy structures containing a flexible array member dynamically > Re: MEM33-C. Allocate and copy structures containing a flexible array member dynamically (SEI CERT C Coding Standard)
10 Comment: EXP05-C. Do not cast away a const qualification > Re: EXP05-C. Do not cast away a const qualification (SEI CERT C Coding Standard)
1024\ Comment: POS34-C. Do not call putenv() with a pointer to an automatic variable as the argument > Re: POS34-C. Do not call putenv() with a pointer to an automatic variable as the argument (SEI CERT C Coding Standard)
Comment: POS34-C. Do not call putenv() with a pointer to an automatic variable as the argument > Re: POS34-C. Do not call putenv() with a pointer to an automatic variable as the argument (SEI CERT C Coding Standard)
10\ Comment: VOID EXP01-C. Do not take the size of a pointer to determine the size of the pointed-to type > Re: VOID EXP01-C. Do not take the size of a pointer to determine the size of the pointed-to type (SEI CERT C Coding Standard)
1234 Comment: EXP09-C. Use sizeof to determine the size of a type or variable > Re: EXP09-C. Use sizeof to determine the size of a type or variable (SEI CERT C Coding Standard)
12345678 Comment: EXP09-C. Use sizeof to determine the size of a type or variable > Re: EXP09-C. Use sizeof to determine the size of a type or variable (SEI CERT C Coding Standard)
1\ Comment: MEM33-C. Allocate and copy structures containing a flexible array member dynamically > Re: MEM33-C. Allocate and copy structures containing a flexible array member dynamically (SEI CERT C Coding Standard)
Comment: FIO17-C. Do not rely on an ending null character when using fread() > Re: FIO17-C. Do not rely on an ending null character when using fread() (SEI CERT C Coding Standard)
  1. Prev
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. 7
  9. Next