Category-740: CERT C Secure Coding Standard (2008) Chapter 7 - Arrays (ARR)

ID: 740 Status: Obsolete

Summary

Weaknesses in this category are related to the rules and recommendations in the Arrays (ARR) chapter of the CERT C Secure Coding Standard (2008).

Membership

ID NAME
CWE-119 内存缓冲区边界内操作的限制不恰当
CWE-129 对数组索引的验证不恰当
CWE-467 在指针类型上使用sizeof()
CWE-469 使用指针的减法来确定大小
CWE-665 初始化不恰当
CWE-805 使用不正确的长度值访问缓冲区

Notes

Relationship

References

REF-597 The CERT C Secure Coding Standard