CERT C Secure Coding Standard (2008) Chapter 14 - Miscellaneous (MSC)

The variable's value is assigned but never used, making it a dead store.

The code uses an operator for comparison when the intention was to perform an assignment.

Sensitive memory is cleared according to the source code, but compiler optimizations leave the memory untouched when it is not read from again, aka "dead store removal."

The product contains dead code, which can never be executed.

The product contains an expression that will always evaluate to false.

The product contains an expression that will always evaluate to true.

The product does not properly handle when an input contains Unicode encoding.

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process th...

The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

The product does not correctly convert an object, resource, or structure from one type to a different type.

The product accidentally uses the wrong operator, which changes the logic in security-relevant ways.

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

CWE entries in this view (graph) are fully or partially eliminated by following the guidance presented in the book "The CERT C Secure Coding Standard" published in 200...