CERT Rule | Related Guidelines |
|---|---|
| PRE31-C | Pre-processor Directives [NMP] |
| DCL30-C | Dangling References to Stack Frames [DCM] |
| DCL31-C | Subprogram Signature Mismatch [OTR] |
| EXP30-C | Operator Precedence/Order of Evaluation [JCW] |
| EXP30-C | Side-effects and Order of Evaluation [SAM] |
| EXP32-C | Pointer Casting and Pointer Type Changes [HFC] |
| EXP32-C | Type System [IHN] |
| EXP33-C | Initialization of Variables [LAV] |
| EXP34-C | Pointer Casting and Pointer Type Changes [HFC] |
| EXP34-C | Null Pointer Dereference [XYH] |
| EXP35-C | Dangling References to Stack Frames [DCM] |
| EXP35-C | Side-effects and Order of Evaluation [SAM] |
| EXP36-C | Pointer Casting and Pointer Type Changes [HFC] |
| EXP37-C | Subprogram Signature Mismatch [OTR] |
| EXP43-C | Passing Parameters and Return Values [CSJ] |
| EXP45-C | Likely Incorrect Expression [KOA] |
| EXP46-C | Likely Incorrect Expression [KOA] |
| INT30-C | Arithmetic Wrap-around Error [FIF] |
| INT31-C | Numeric Conversion Errors [FLC] |
| INT32-C | Arithmetic Wrap-around Error [FIF] |
| INT34-C | Arithmetic Wrap-around Error [FIF] |
| INT36-C | Pointer Casting and Pointer Type Changes [HFC] |
| FLP30-C | Floating-Point Arithmetic [PLF] |
| FLP34-C | Numeric Conversion Errors [FLC] |
| ARR30-C | Arithmetic Wrap-around Error [FIF] |
| ARR30-C | Unchecked Array Indexing [XYZ] |
| ARR32-C | Unchecked Array Indexing [XYZ] |
| ARR38-C | Buffer Boundary Violation (Buffer Overflow) [HCB] |
| ARR38-C | Unchecked Array Copying [XYW] |
| ARR39-C | Pointer Casting and Pointer Type Changes [HFC] |
| ARR39-C | Pointer Arithmetic [RVG] |
| STR31-C | String Termination [CJM] |
| STR31-C | Buffer Boundary Violation (Buffer Overflow) [HCB] |
| STR31-C | Unchecked Array Copying [XYW] |
| STR32-C | String Termination [CMJ] |
| MEM30-C | Dangling References to Stack Frames [DCM] |
| MEM30-C | Dangling Reference to Heap [XYK] |
| MEM31-C | Memory Leak [XYL] |
| MEM35-C | Buffer Boundary Violation (Buffer Overflow) [HCB] |
| FIO30-C | Injection [RST] |
| ENV32-C | Structured Programming [EWD] |
| ENV32-C | Termination Strategy [REU] |
| ENV33-C | Unquoted Search Path or Element [XZQ] |
| POS36-C | Privilege Sandbox Issues [XYO] |
| POS37-C | Privilege Sandbox Issues [XYO] |
| API07-C | String Termination [CJM] |
| DCL02-C | Choice of Clear Names [NAI] |
| DCL07-C | Type System [IHN] |
| DCL07-C | Subprogram Signature Mismatch [OTR] |
| DCL09-C | Ignored Error Status and Unhandled Exceptions [OYB] |
| DCL10-C | Subprogram Signature Mismatch [OTR] |
| DCL11-C | Type System [IHN] |
| DCL11-C | Subprogram Signature Mismatch [OTR] |
| DCL13-C | Passing Parameters and Return Values [CSJ] |
| DCL23-C | Choice of Clear Names [NAI] |
| DCL23-C | Identifier Name Reuse [YOW] |
| ENV02-C | Executing or Loading Untrusted Code [XYS] |
| ENV03-C | Executing or Loading Untrusted Code [XYS] |
| ERR00-C | Termination Strategy [REU] |
| ERR04-C | Termination Strategy [REU] |
| ERR06-C | Termination Strategy [REU] |
| EXP00-C | Operator Precedence/Order of Evaluation [JCW] |
| EXP05-C | Pointer Casting and Pointer Type Changes [HFC] |
| EXP05-C | Type System [IHN] |
| EXP08-C | Pointer Casting and Pointer Type Changes [HFC] |
| EXP08-C | Pointer Arithmetic [RVG] |
| EXP10-C | Operator Precedence/Order of Evaluation [JCW] |
| EXP10-C | Side-effects and Order of Evaluation [SAM] |
| EXP11-C | Bit Representations [STR] |
| EXP12-C | Passing Parameters and Return Values [CSJ] |
| EXP15-C | Likely Incorrect Expression [KOA] |
| EXP16-C | Likely incorrect expressions [KOA] |
| FIO02-C | Path Traversal [EWR] |
| FIO05-C | Path Traversal [EWR] |
| FIO06-C | Missing or Inconsistent Access Control [XZN] |
| FIO21-C | Path Traversal [EWR] |
| FLP00-C | Floating-point Arithmetic [PLF] |
| FLP01-C | Floating-point Arithmetic [PLF] |
| FLP02-C | Floating-point Arithmetic [PLF] |
| INT00-C | Bit Representations [STR] |
| INT02-C | Numeric Conversion Errors [FLC] |
| INT07-C | Bit Representations [STR] |
| INT08-C | Numeric Conversion Errors [FLC] |
| INT09-C | Enumerator Issues [CCB] |
| INT12-C | Bit Representations [STR] |
| INT13-C | Bit Representations [STR] |
| INT13-C | Arithmetic Wrap-around Error [FIF] |
| INT13-C | Sign Extension Error [XZI] |
| INT14-C | Bit Representations [STR] |
| INT18-C | Numeric Conversion Errors [FLC] |
| MEM00-C | Memory Leak [XYL] |
| MEM01-C | Dangling References to Stack Frames [DCM] |
| MEM01-C | Dangling Reference to Heap [XYK] |
| MEM01-C | Off-by-one Error [XZH] |
| MEM03-C | Sensitive Information Uncleared Before Use [XZK] |
| MEM05-C | Recursion [GDL] |
| MEM06-C | Memory Locking [XZX] |
| MSC01-C | Switch Statements and Static Analysis [CLL] |
| MSC07-C | Unspecified functionality [BVQ] |
| MSC07-C | Dead and deactivated code [XYQ] |
| MSC12-C | Unspecified Functionality [BVQ] |
| MSC12-C | Likely Incorrect Expressions [KOA] |
| MSC12-C | Dead and Deactivated Code [XYQ] |
| MSC13-C | Likely Incorrect Expressions [KOA] |
| MSC13-C | Dead and Deactivated Code [XYQ] |
| MSC13-C | Unused Variable [XYR] |
| MSC14-C | Unspecified Behaviour [BQF] |
| MSC15-C | Unspecified Behaviour [BQF] |
| MSC15-C | Undefined Behaviour [EWF] |
| MSC15-C | Implementation-Defined Behaviour [FAB] |
| MSC24-C | Use of Libraries [TRJ] |
| POS02-C | Adherence to Least Privilege [XYN] |
| PRE00-C | Pre-processor Directives [NMP] |
| PRE01-C | Operator Precedence/Order of Evaluation [JCW] |
| PRE01-C | Pre-processor Directives [NMP] |
| PRE02-C | Operator Precedence/Order of Evaluation [JCW] |
| PRE02-C | Pre-processor Directives [NMP] |
| PRE03-C | Pre-processor Directives [NMP] |
| PRE09-C | Executing or Loading Untrusted Code [XYS] |
| PRE10-C | Pre-processor Directives [NMP] |
| PRE13-C | Pre-processor Directives [NMP] |
| STR03-C | String Termination [CJM] |
| STR07-C | Use of Libraries [TRJ] |
| STR11-C | String Termination [CJM] |
| WIN02-C | Adherence to Least Privilege [XYN] |