MADCAD.com - The Cloud-Based Reference Library

- Free Trial - Webinar - Feedback

Cart (0)

No items in cart.

Total

There is a technical issue about last added item. You can click "Report to us" button to let us know and we resolve the issue and return back to you or you can continue without last item via click to continue button.

Home

Content

Tour

eLibrary

Store

Not a subscriber? Register for a trial account.

Username:
Password:

Incorrect username/password.

Already a subscriber?

MADCAD.com Free Trial

Sign up for a 3 day free trial to explore the MADCAD.com interface, PLUS access the
2009 International Building Code to see how it all works.

If you like to setup a quick demo, let us know at support@madcad.com
or +1 800.798.9296 and we will be happy to schedule a webinar for you.

Email *
Password *
Confirm *
First Name *
Last Name *
Title
Company Name *
Company Size *
Industry *
Address *
Address 2
City *
State *	Zip *
Country *
Phone *
How did you hear about MADCAD.com? *

Print page(s), starting from page (current page)

Continue to Print

Reset password

Enter your personal account email address to request
a password reset:

Reset password

Enter your account email address to request
a password reset:

Save As:

Are you sure you want to delete this group?

Security check

Please check the following box:

Please login to your personal account to use this feature.

Email:

Password:

Forgot your password?

Remember me for one month

Need a login? Register now.

Please login to your authorized staff account to use this feature.

Username:

Password:

Are you sure you want to empty the cart?

There were no books found for the applied search filters.

CLICK TO START OVER

Report To Us

Please fill the form below so that we can contact you.

Full name*
Email*
Phone

Contact us for a custom quote

Please fill the form below and a member of our staff will contact you shortly. The contents of your cart will automatically be sent to us so we can provide an accurate custom quote.

Company*
Full name*
Email*
Phone

⨯To continue with accurate pricing,
please select your company type below:

Large goverment organizations

Large multi-national corporation (more than $5B annual revenue)

None of the above

Your company has a special pricing case for IEEE.
For pricing, please contact us by filling out the form.

Full name*
Email*
Phone
Your selection

⨯We need your input!

Are you a code official in a jurisdiction with less than 300,000 population?

Yes No

This item is only available for the code officials of jurisdictions less then 300K population.

If you do not meet the criteria item will be removed and you will be able to continue shopping other items.

⨯ We need your input!

Your company has a special pricing case for ASME.
Please make sure the information you provide below is accurate.

Company Industry
Number Of Employees
Revenue

Pricing for the ASME publications in the store is for a 1-4 employee company in Construction Industry with revenue under $500,000.
If correct company info does not match what is publicly available info we will suspend the access and contact you for correction.
Please call 1-800-798-9296 if you have any questions.
If your company has more than 5,000 employee or more than 500 mil revenue please email us at info@madcad.com to receive a special quote, use "ASME Quote" on the subject line.

Cart Warning

Search book title

Search book content

Clear all filters Advanced Search Basic Search

Download File

eLibrary > BS ISO/IEC 24772-1:2024 - TC Tracked Changes. Programming languages. Avoiding vulnerabilities in programming languages - Language-independent catalogue of vulnerabilities >

BS ISO/IEC 24772-1:2024 - TC Tracked Changes. Programming languages. Avoiding vulnerabilities in programming languages - Language-independent catalogue of vulnerabilities, 2024

Expand All

TOC Search:

BS ISO/IEC 24772-1:2024 - TC Tracked Changes. Programming languages. Avoiding vulnerabilities in programming languages - Language-independent catalogue of vulnerabilities, 2024

A-30447871.pdf [Go to Page]
undefined
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions [Go to Page]
3.1 Communication
3.2 Execution model
3.3 Properties
3.4 Safety and security
3.5 Vulnerabilities
3.6 Specific vulnerabilities
4 Using this document [Go to Page]
4.1 Purpose of this document
4.2 Applying this document
4.3 Structure of this document
5 General vulnerability issues and primary avoidance mechanisms [Go to Page]
5.1 General vulnerability issues [Go to Page]
5.1.1 Predictable execution
5.1.2 Sources of unpredictability in language specification
5.1.3 Sources of unpredictability in language usage
5.2 Primary avoidance mechanisms
6 Programming language vulnerabilities [Go to Page]
6.1 General
6.2 Type system [IHN] [Go to Page]
6.2.1 Description of application vulnerability
6.2.2 Related coding guidelines
6.2.3 Mechanism of failure
6.2.4 Applicable language characteristics
6.2.5 Avoiding the vulnerability or mitigating its effects
6.2.6 Implications for language design and evolution
6.3 Bit representations [STR] [Go to Page]
6.3.1 Description of application vulnerability
6.3.2 Related coding guidelines
6.3.3 Mechanism of failure
6.3.4 Applicable language characteristics
6.3.5 Avoiding the vulnerability or mitigating its effects
6.3.6 Implications for language design and evolution
6.4 Floating-point arithmetic [PLF] [Go to Page]
6.4.1 Description of application vulnerability
6.4.2 Related coding guidelines
6.4.3 Mechanism of failure
6.4.4 Applicable language characteristics
6.4.5 Avoiding the vulnerability or mitigating its effects
6.4.6 Implications for language design and evolution
6.5 Enumerator issues [CCB] [Go to Page]
6.5.1 Description of application vulnerability
6.5.2 Related coding guidelines
6.5.3 Mechanism of failure
6.5.4 Applicable language Characteristics
6.5.5 Avoiding the vulnerability or mitigating its effects
6.5.6 Implications for language design and evolution
6.6 Conversion errors [FLC] [Go to Page]
6.6.1 Description of application vulnerability
6.6.2 Related coding guidelines
6.6.3 Mechanism of failure
6.6.4 Applicable language characteristics
6.6.5 Avoiding the vulnerability or mitigating its effects
6.6.6 Implications for language design and evolution
6.7 String termination [CJM] [Go to Page]
6.7.1 Description of application vulnerability
6.7.2 Related coding guidelines
6.7.3 Mechanism of failure
6.7.4 Applicable language characteristics
6.7.5 Avoiding the vulnerability or mitigating its effects
6.7.6 Implications for language design and evolution
6.8 Buffer boundary violation (buffer overflow) [HCB] [Go to Page]
6.8.1 Description of application vulnerability
6.8.2 Related coding guidelines
6.8.3 Mechanism of failure
6.8.4 Applicable language characteristics
6.8.5 Avoiding the vulnerability or mitigating its effects
6.8.6 Implications for language design and evolution
6.9 Unchecked array indexing [XYZ] [Go to Page]
6.9.1 Description of application vulnerability
6.9.2 Related coding guidelines
6.9.3 Mechanism of failure
6.9.4 Applicable language characteristics
6.9.5 Avoiding the vulnerability or mitigating its effects
6.9.6 Implications for language designers
6.10 Unchecked array copying [XYW] [Go to Page]
6.10.1 Description of application vulnerability
6.10.2 Related coding guidelines
6.10.3 Mechanism of failure
6.10.4 Applicable language characteristics
6.10.5 Avoiding the vulnerability or mitigating its effects
6.10.6 Implications for language design and evolution
6.11 Pointer type conversions [HFC] [Go to Page]
6.11.1 Description of application vulnerability
6.11.2 Related coding guidelines
6.11.3 Mechanism of failure
6.11.4 Applicable language characteristics
6.11.5 Avoiding the vulnerability or mitigating its effects
6.11.6 Implications for language design and evolution
6.12 Pointer arithmetic [RVG] [Go to Page]
6.12.1 Description of application vulnerability
6.12.2 Related coding guidelines
6.12.3 Mechanism of failure
6.12.4 Applicable language characteristics
6.12.5 Avoiding the vulnerability or mitigating its effects
6.12.6 Implications for language design and evolution
6.13 Null pointer dereference [XYH] [Go to Page]
6.13.1 Description of application vulnerability
6.13.2 Related coding guidelines
6.13.3 Mechanism of failure
6.13.4 Applicable language characteristics
6.13.5 Avoiding the vulnerability or mitigating its effects
6.13.6 Implications for language design and evolution
6.14 Dangling reference to heap [XYK] [Go to Page]
6.14.1 Description of application vulnerability
6.14.2 Related coding guidelines
6.14.3 Mechanism of failure
6.14.4 Applicable language characteristics
6.14.5 Avoiding the vulnerability or mitigating its effects
6.14.6 Implications for language design and evolution
6.15 Arithmetic wrap-around error [FIF] [Go to Page]
6.15.1 Description of application vulnerability
6.15.2 Related coding guidelines
6.15.3 Mechanism of failure
6.15.4 Applicable language characteristics
6.15.5 Avoiding the vulnerability or mitigating its effects
6.15.6 Implications for language design and evolution
6.16 Using shift operations for multiplication and division [PIK] [Go to Page]
6.16.1 Description of application vulnerability
6.16.2 Related coding guidelines
6.16.3 Mechanism of failure
6.16.4 Applicable language characteristics
6.16.5 Avoiding the vulnerability or mitigating its effects
6.16.6 Implications for language design and evolution
6.17 Choice of clear names [NAI] [Go to Page]
6.17.1 Description of application vulnerability
6.17.2 Related coding guidelines
6.17.3 Mechanism of Failure
6.17.4 Applicable language characteristics
6.17.5 Avoiding the vulnerability or mitigating its effects
6.17.6 Implications for language design and evolution
6.18 Dead store [WXQ] [Go to Page]
6.18.1 Description of application vulnerability
6.18.2 Related coding guidelines
6.18.3 Mechanism of failure
6.18.4 Applicable language characteristics
6.18.5 Avoiding the vulnerability or mitigating its effects
6.18.6 Implications for language design and evolution
6.19 Unused variable [YZS] [Go to Page]
6.19.1 Description of application vulnerability
6.19.2 Related coding guidelines
6.19.3 Mechanism of failure
6.19.4 Applicable language characteristics
6.19.5 Avoiding the vulnerability or mitigating its effects
6.19.6 Implications for language design and evolution
6.20 Identifier name reuse [YOW] [Go to Page]
6.20.1 Description of application vulnerability
6.20.2 Related coding guidelines
6.20.3 Mechanism of failure
6.20.4 Applicable language characteristics
6.20.5 Avoiding the vulnerability or mitigating its effects
6.20.6 Implications for language design and evolution
6.21 Namespace issues [BJL] [Go to Page]
6.21.1 Description of application vulnerability
6.21.2 Related coding guidelines
6.21.3 Mechanism of Failure
6.21.4 Applicable language characteristics
6.21.5 Avoiding the Vulnerability or Mitigating its Effects
6.21.6 Implications for language design and evolution
6.22 Missing initialization of variables [LAV] [Go to Page]
6.22.1 Description of application vulnerability
6.22.2 Related coding guidelines
6.22.3 Mechanism of failure
6.22.4 Applicable language characteristics
6.22.5 Avoiding the vulnerability or mitigating its effects
6.22.6 Implications for language design and evolution
6.23 Operator precedence and associativity [JCW] [Go to Page]
6.23.1 Description of application vulnerability
6.23.2 Related coding guidelines
6.23.3 Mechanism of failure
6.23.4 Applicable language characteristics
6.23.5 Avoiding the vulnerability or mitigating its effects
6.23.6 Implications for language design and evolution
6.24 Side-effects and order of evaluation of operands [SAM] [Go to Page]
6.24.1 Description of application vulnerability
6.24.2 Related coding guidelines
6.24.3 Mechanism of failure
6.24.4 Applicable language characteristics
6.24.5 Avoiding the vulnerability or mitigating its effects
6.24.6 Implications for language design and evolution
6.25 Likely incorrect expression [KOA] [Go to Page]
6.25.1 Description of application vulnerability
6.25.2 Related coding guidelines
6.25.3 Mechanism of failure
6.25.4 Applicable language characteristics
6.25.5 Avoiding the vulnerability or mitigating its effects
6.25.6 Implications for language design and evolution
6.26 Dead and deactivated code [XYQ] [Go to Page]
6.26.1 Description of application vulnerability
6.26.2 Related coding guidelines
6.26.3 Mechanism of failure
6.26.4 Applicable language characteristics
6.26.5 Avoiding the vulnerability or mitigating its effects
6.26.6 Implications for language design and evolution
6.27 Switch statements and lack of static analysis [CLL] [Go to Page]
6.27.1 Description of application vulnerability
6.27.2 Related coding guidelines
6.27.3 Mechanism of failure
6.27.4 Applicable language characteristics
6.27.5 Avoiding the vulnerability or mitigating its effects
6.27.6 Implications for language design and evolution
6.28 Non-demarcation of control flow [EOJ] [Go to Page]
6.28.1 Description of application vulnerability
6.28.2 Related coding guidelines
6.28.3 Mechanism of failure
6.28.4 Applicable language characteristics
6.28.5 Avoiding the vulnerability or mitigating its effects
6.28.6 Implications for language design and evolution
6.29 Loop control variable abuse [TEX] [Go to Page]
6.29.1 Description of application vulnerability
6.29.2 Related coding guidelines
6.29.3 Mechanism of failure
6.29.4 Applicable language characteristics
6.29.5 Avoiding the vulnerability or mitigating its effects
6.29.6 Implications for language design and evolution
6.30 Off-by-one error [XZH] [Go to Page]
6.30.1 Description of application vulnerability
6.30.2 Related coding guidelines
6.30.3 Mechanism of failure
6.30.4 Applicable language characteristics
6.30.5 Avoiding the vulnerability or mitigating its effects
6.30.6 Implications for language design and evolution
6.31 Unstructured programming [EWD] [Go to Page]
6.31.1 Description of application vulnerability
6.31.2 Related coding guidelines
6.31.3 Mechanism of failure
6.31.4 Applicable language characteristics
6.31.5 Avoiding the vulnerability or mitigating its effects
6.31.6 Implications for language design and evolution
6.32 Passing parameters and return values [CSJ] [Go to Page]
6.32.1 Description of application vulnerability
6.32.2 Related coding guidelines
6.32.3 Mechanism of failure
6.32.4 Applicable language characteristics
6.32.5 Avoiding the vulnerability or mitigating its effects
6.32.6 Implications for language design and evolution
6.33 Dangling references to stack frames [DCM] [Go to Page]
6.33.1 Description of application vulnerability
6.33.2 Related coding guidelines
6.33.3 Mechanism of failure
6.33.4 Applicable language characteristics
6.33.5 Avoiding the vulnerability or mitigating its effects
6.33.6 Implications for language design and evolution
6.34 Subprogram signature mismatch [OTR] [Go to Page]
6.34.1 Description of application vulnerability
6.34.2 Related coding guidelines
6.34.3 Mechanism of failure
6.34.4 Applicable language characteristics
6.34.5 Avoiding the vulnerability or mitigating its effects
6.34.6 Implications for language design and evolution
6.35 Recursion [GDL] [Go to Page]
6.35.1 Description of application vulnerability
6.35.2 Related coding guidelines
6.35.3 Mechanism of failure
6.35.4 Applicable language characteristics
6.35.5 Avoiding the vulnerability or mitigating its effects
6.35.6 Implications for language design and evolution
6.36 Ignored error status and unhandled exceptions [OYB] [Go to Page]
6.36.1 Description of application vulnerability
6.36.2 Related coding guidelines
6.36.3 Mechanism of failure
6.36.4 Applicable language characteristics
6.36.5 Avoiding the vulnerability or mitigating its effects
6.36.6 Implications for language design and evolution
6.37 Type-breaking reinterpretation of data [AMV] [Go to Page]
6.37.1 Description of application vulnerability
6.37.2 Related coding guidelines
6.37.3 Mechanism of failure
6.37.4 Applicable language characteristics
6.37.5 Avoiding the vulnerability or mitigating its effects
6.37.6 Implications for language design and evolution
6.38 Deep vs. shallow copying [YAN] [Go to Page]
6.38.1 Description of application vulnerability
6.38.2 Related coding guidelines
6.38.3 Mechanism of failure
6.38.4 Applicable language characteristics
6.38.5 Avoiding the vulnerability or mitigating its effects
6.38.6 Implications for language design and evolution
6.39 Memory leaks and heap fragmentation [XYL] [Go to Page]
6.39.1 Description of application vulnerability
6.39.2 Related coding guidelines
6.39.3 Mechanism of failure
6.39.4 Applicable language characteristics
6.39.5 Avoiding the vulnerability or mitigating its effects
6.39.6 Implications for language design and evolution
6.40 Templates and generics [SYM] [Go to Page]
6.40.1 Description of application vulnerability
6.40.2 Related coding guidelines
6.40.3 Mechanism of failure
6.40.4 Applicable language characteristics
6.40.5 Avoiding the vulnerability or mitigating its effects
6.40.6 Implications for language design and evolution
6.41 Inheritance [RIP] [Go to Page]
6.41.1 Description of application vulnerability
6.41.2 Related coding guidelines
6.41.3 Mechanism of failure
6.41.4 Applicable language characteristics
6.41.5 Avoiding the vulnerability or mitigating its effects
6.41.6 Implications for language design and evolution
6.42 Violations of the Liskov substitution principle or the contract model [BLP] [Go to Page]
6.42.1 Description of application vulnerability
6.42.2 Related coding guidelines
6.42.3 Mechanism of failure
6.42.4 Applicable language characteristics
6.42.5 Avoiding the vulnerability or mitigating its effects
6.42.6 Implications for language design and evolution
6.43 Redispatching [PPH] [Go to Page]
6.43.1 Description of application vulnerability
6.43.2 Related coding guidelines
6.43.3 Mechanism of failure
6.43.4 Applicable language characteristics
6.43.5 Avoiding the vulnerability or mitigating its effects
6.43.6 Implications for language design and evolution
6.44 Polymorphic variables [BKK] [Go to Page]
6.44.1 Description of application vulnerability
6.44.2 Related coding guidelines
6.44.3 Mechanism of failure
6.44.4 Applicable language characteristics
6.44.5 Avoiding the vulnerability or mitigating its effects
6.44.6 Implications for language design and evolution
6.45 Extra intrinsics [LRM] [Go to Page]
6.45.1 Description of application vulnerability
6.45.2 Related coding guidelines
6.45.3 Mechanism of failure
6.45.4 Applicable language characteristics
6.45.5 Avoiding the vulnerability or mitigating its effects
6.45.6 Implications for language design and evolution
6.46 Argument passing to library functions [TRJ] [Go to Page]
6.46.1 Description of application vulnerability
6.46.2 Related coding guidelines
6.46.3 Mechanism of failure
6.46.4 Applicable language characteristics
6.46.5 Avoiding the vulnerability or mitigating its effects
6.46.6 Implications for language design and evolution
6.47 Inter-language calling [DJS] [Go to Page]
6.47.1 Description of application vulnerability
6.47.2 Related coding guidelines
6.47.3 Mechanism of failure
6.47.4 Applicable language characteristics
6.47.5 Avoiding the vulnerability or mitigating its effects
6.47.6 Implications for language design and evolution
6.48 Dynamically-linked code and self-modifying code [NYY] [Go to Page]
6.48.1 Description of application vulnerability
6.48.2 Related coding guidelines
6.48.3 Mechanism of failure
6.48.4 Applicable language characteristics
6.48.5 Avoiding the vulnerability or mitigating its effects
6.48.6 Implications for language design and evolution
6.49 Library signature [NSQ] [Go to Page]
6.49.1 Description of application vulnerability
6.49.2 Related coding guidelines
6.49.3 Mechanism of failure
6.49.4 Applicable language characteristics
6.49.5 Avoiding the vulnerability or mitigating its effects
6.49.6 Implications for language design and evolution
6.50 Unanticipated exceptions from library routines [HJW] [Go to Page]
6.50.1 Description of application vulnerability
6.50.2 Cross reference
6.50.3 Related coding guidelines
6.50.4 Applicable language characteristics
6.50.5 Avoiding the vulnerability or mitigating its effects
6.50.6 Implications for language design and evolution
6.51 Pre-processor directives [NMP] [Go to Page]
6.51.1 Description of application vulnerability
6.51.2 Related coding guidelines
6.51.3 Mechanism of failure
6.51.4 Applicable language characteristics
6.51.5 Avoiding the vulnerability or mitigating its effects
6.51.6 Implications for language design and evolution
6.52 Suppression of language-defined run-time checking [MXB] [Go to Page]
6.52.1 Description of application vulnerability
6.52.2 Related coding guidelines
6.52.3 Mechanism of Failure
6.52.4 Applicable language characteristics
6.52.5 Avoiding the vulnerability
6.52.6 Implications for language design and evolution
6.53 Provision of inherently unsafe operations [SKL] [Go to Page]
6.53.1 Description of application vulnerability
6.53.2 Related coding guidelines
6.53.3 Mechanism of Failure
6.53.4 Applicable language characteristics
6.53.5 Avoiding the vulnerability or mitigating its effect
6.53.6 Implications for language design and evolution
6.54 Obscure language features [BRS] [Go to Page]
6.54.1 Description of application vulnerability
6.54.2 Related coding guidelines
6.54.3 Mechanism of failure
6.54.4 Applicable language characteristics
6.54.5 Avoiding the vulnerability or mitigating its effects
6.54.6 Implications for language design and evolution
6.55 Unspecified behaviour [BQF] [Go to Page]
6.55.1 Description of application vulnerability
6.55.2 Related coding guidelines
6.55.3 Mechanism of failure
6.55.4 Applicable language characteristics
6.55.5 Avoiding the vulnerability or mitigating its effects
6.55.6 Implications for language design and evolution
6.56 Undefined behaviour [EWF] [Go to Page]
6.56.1 Description of application vulnerability
6.56.2 Related coding guidelines
6.56.3 Mechanism of failure
6.56.4 Applicable language characteristics
6.56.5 Avoiding the vulnerability or mitigating its effects
6.56.6 Implications for language design and evolution
6.57 Implementation-defined behaviour [FAB] [Go to Page]
6.57.1 Description of application vulnerability
6.57.2 Related coding guidelines
6.57.3 Mechanism of failure
6.57.4 Applicable language characteristics
6.57.5 Avoiding the vulnerability or mitigating its effects
6.57.6 Implications for language design and evolution
6.58 Deprecated language features [MEM] [Go to Page]
6.58.1 Description of application vulnerability
6.58.2 Related coding guidelines
6.58.3 Mechanism of failure
6.58.4 Applicable language characteristics
6.58.5 Avoiding the vulnerability or mitigating its effects
6.58.6 Implications for language design and evolution
6.59 Concurrency – Activation [CGA] [Go to Page]
6.59.1 Description of application vulnerability
6.59.2 Related coding guidelines
6.59.3 Mechanism of Failure
6.59.4 Applicable language characteristics
6.59.5 Avoiding the vulnerability or mitigating its effects
6.59.6 Implications for language design and evolution
6.60 Concurrency – Directed termination [CGT] [Go to Page]
6.60.1 Description of application vulnerability
6.60.2 Related coding guidelines
6.60.3 Mechanism of failure
6.60.4 Applicable language characteristics
6.60.5 Avoiding the vulnerability or mitigating its effect
6.60.6 Implications for language design and evolution
6.61 Concurrent data access [CGX] [Go to Page]
6.61.1 Description of application vulnerability
6.61.2 Related coding guidelines
6.61.3 Mechanism of failure
6.61.4 Applicable language characteristics
6.61.5 Avoiding the vulnerability or mitigating its effect
6.61.6 Implications for language design and evolution
6.62 Concurrency – Premature termination [CGS] [Go to Page]
6.62.1 Description of application vulnerability
6.62.2 Related coding guidelines
6.62.3 Mechanism of failure
6.62.4 Applicable language characteristics
6.62.5 Avoiding the vulnerability or mitigating its effect
6.62.6 Implications for language design and evolution
6.63 Lock protocol errors [CGM] [Go to Page]
6.63.1 Description of application vulnerability
6.63.2 Related coding guidelines
6.63.3 Mechanism of failure
6.63.4 Applicable language characteristics
6.63.5 Avoiding the vulnerability or mitigating its effect
6.63.6 Implications for language design and evolution
6.64 Reliance on external format strings [SHL] [Go to Page]
6.64.1 Description of application vulnerability
6.64.2 Related coding guidelines
6.64.3 Mechanism of failure
6.64.4 Applicable language characteristics
6.64.5 Avoiding the vulnerability or mitigating its effects
6.64.6 Implications for language design and evolution
6.65 Modifying constants [UJO] [Go to Page]
6.65.1 Description of application vulnerability
6.65.2 Related coding guidelines
6.65.3 Mechanism of failure
6.65.4 Applicable language characteristics
6.65.5 Avoiding the vulnerability or mitigating its effects
6.65.6 Implications for language design and evolution
7 Application vulnerabilities [Go to Page]
7.1 General
7.2 Unrestricted file upload [CBF] [Go to Page]
7.2.1 Description of application vulnerability
7.2.2 Related coding guidelines
7.2.3 Mechanism of failure
7.2.4 Avoiding the vulnerability or mitigating its effects
7.3 Download of code without integrity check [DLB] [Go to Page]
7.3.1 Description of application vulnerability
7.3.2 Related coding guidelines
7.3.3 Mechanism of failure
7.3.4 Avoiding the vulnerability or mitigating its effects
7.4 Executing or loading untrusted code [XYS] [Go to Page]
7.4.1 Description of application vulnerability
7.4.2 Related coding guidelines
7.4.3 Mechanism of failure
7.4.4 Avoiding the vulnerability or mitigating its effects
7.5 Inclusion of functionality from untrusted control sphere [DHU] [Go to Page]
7.5.1 Description of application vulnerability
7.5.2 Related coding guidelines
7.5.3 Mechanism of failure
7.5.4 Avoiding the vulnerability or mitigating its effects
7.6 Use of unchecked data from an uncontrolled or tainted source [EFS] [Go to Page]
7.6.1 Description of application vulnerability
7.6.2 Related coding guidelines
7.6.3 Mechanism of failure
7.6.4 Avoiding the vulnerability or mitigating its effects
7.7 Cross-site scripting [XYT] [Go to Page]
7.7.1 Description of application vulnerability
7.7.2 Related coding guidelines
7.7.3 Mechanism of failure
7.7.4 Avoiding the vulnerability or mitigating its effects
7.8 URL redirection to untrusted site ("open redirect") [PYQ] [Go to Page]
7.8.1 Description of application vulnerability
7.8.2 Related coding guidelines
7.8.3 Mechanism of failure
7.8.4 Avoiding the vulnerability or mitigating its effects
7.9 Injection [RST] [Go to Page]
7.9.1 Description of application vulnerability
7.9.2 Related coding guidelines
7.9.3 Mechanism of failure
7.9.4 Avoiding the vulnerability or mitigating its effects
7.10 Unquoted search path or element [XZQ] [Go to Page]
7.10.1 Description of application vulnerability
7.10.2 Related coding guidelines
7.10.3 Mechanism of failure
7.10.4 Avoiding the vulnerability or mitigating its effects
7.11 Path traversal [EWR] [Go to Page]
7.11.1 Description of application vulnerability
7.11.2 Related coding guidelines
7.11.3 Mechanism of failure
7.11.4 Avoiding the vulnerability or mitigating its effects
7.12 Resource names [HTS] [Go to Page]
7.12.1 Description of application vulnerability
7.12.2 Related coding guidelines
7.12.3 Mechanism of Failure
7.12.4 Avoiding the vulnerability or mitigating its effects
7.13 Resource exhaustion [XZP] [Go to Page]
7.13.1 Description of application vulnerability
7.13.2 Related coding guidelines
7.13.3 Mechanism of failure
7.13.4 Avoiding the vulnerability or mitigating its effects
7.14 Authentication logic error [XZO] [Go to Page]
7.14.1 Description of application vulnerability
7.14.2 Related coding guidelines
7.14.3 Mechanism of failure
7.14.4 Avoiding the vulnerability or mitigating its effects
7.15 Improper restriction of excessive authentication attempts [WPL] [Go to Page]
7.15.1 Description of application vulnerability
7.15.2 Related coding guidelines
7.15.3 Mechanism of failure
7.15.4 Avoiding the vulnerability or mitigating its effects
7.16 Hard-coded credentials [XYP] [Go to Page]
7.16.1 Description of application vulnerability
7.16.2 Related coding guidelines
7.16.3 Mechanism of failure
7.16.4 Avoiding the vulnerability or mitigating its effects
7.17 Insufficiently protected credentials [XYM] [Go to Page]
7.17.1 Description of application vulnerability
7.17.2 Related coding guidelines
7.17.3 Mechanism of failure
7.17.4 Avoiding the vulnerability or mitigating its effects
7.18 Missing or inconsistent access control [XZN] [Go to Page]
7.18.1 Description of application vulnerability
7.18.2 Related coding guidelines
7.18.3 Mechanism of failure
7.18.4 Avoiding the vulnerability or mitigating its effects
7.19 Incorrect authorization [BJE] [Go to Page]
7.19.1 Description of application vulnerability
7.19.2 Related coding guidelines
7.19.3 Mechanism of failure
7.19.4 Avoiding the vulnerability or mitigating its effects
7.20 Adherence to least privilege [XYN] [Go to Page]
7.20.1 Description of application vulnerability
7.20.2 Related coding guidelines
7.20.3 Mechanism of failure
7.20.4 Avoiding the vulnerability or mitigating its effects
7.21 Privilege sandbox issues [XYO] [Go to Page]
7.21.1 Description of application vulnerability
7.21.2 Related coding guidelines
7.21.3 Mechanism of failure
7.21.4 Avoiding the vulnerability or mitigating its effects
7.22 Missing required cryptographic step [XZS] [Go to Page]
7.22.1 Description of application vulnerability
7.22.2 Related coding guidelines
7.22.3 Mechanism of failure
7.22.4 Avoiding the vulnerability or mitigating its effects
7.23 Improperly verified signature [XZR] [Go to Page]
7.23.1 Description of application vulnerability
7.23.2 Related coding guidelines
7.23.3 Mechanism of failure
7.23.4 Avoiding the vulnerability or mitigating its effects
7.24 Use of a one-way hash without a salt [MVX] [Go to Page]
7.24.1 Description of application vulnerability
7.24.2 Related coding guidelines
7.24.3 Mechanism of failure
7.24.4 Avoiding the vulnerability or mitigating its effects
7.25 Inadequately secure communication of shared resources [CGY] [Go to Page]
7.25.1 Description of application vulnerability
7.25.2 Related coding guidelines
7.25.3 Mechanism of failure
7.25.4 Avoiding the vulnerability or mitigating its effect
7.26 Memory locking [XZX] [Go to Page]
7.26.1 Description of application vulnerability
7.26.2 Related coding guidelines
7.26.3 Mechanism of failure
7.26.4 Avoiding the vulnerability or mitigating its effects
7.27 Sensitive information not cleared before use [XZK] [Go to Page]
7.27.1 Description of application vulnerability
7.27.2 Related coding guidelines
7.27.3 Mechanism of failure
7.27.4 Avoiding the vulnerability or mitigating its effects
7.28 Time consumption measurement [CCM] [Go to Page]
7.28.1 Description of application vulnerability
7.28.2 Related coding guidelines
7.28.3 Mechanism of failure
7.28.4 Avoiding the vulnerability or mitigating its effect
7.29 Discrepancy information leak [XZL] [Go to Page]
7.29.1 Description of application vulnerability
7.29.2 Related coding guidelines
7.29.3 Mechanism of failure
7.29.4 Avoiding the vulnerability or mitigating its effects
7.30 Unspecified functionality [BVQ] [Go to Page]
7.30.1 Description of application vulnerability
7.30.2 Related coding guidelines
7.30.3 Mechanism of failure
7.30.4 Avoiding the vulnerability or mitigating its effects
7.31 Fault tolerance and failure strategies [REU] [Go to Page]
7.31.1 Description of application vulnerability
7.31.2 Related coding guidelines
7.31.3 Mechanism of failure
7.31.4 Avoiding the vulnerability or mitigating its effects
7.32 Distinguished values in data types [KLK] [Go to Page]
7.32.1 Description of application vulnerability
7.32.2 Related coding guidelines
7.32.3 Mechanism of failure
7.32.4 Avoiding the vulnerability or mitigating its effects
7.33 Clock issues [CCI] [Go to Page]
7.33.1 Description of application vulnerability
7.33.2 Related coding guidelines
7.33.3 Mechanism of failure
7.33.4 Avoiding the vulnerability or mitigating its effect
7.34 Time drift and jitter [CDJ] [Go to Page]
7.34.1 Description of application vulnerability
7.34.2 Related coding guidelines
7.34.3 Mechanism of failure
7.34.4 Avoiding the vulnerability or mitigating its effect
Annex A (informative) Vulnerability taxonomy and list
Annex B (informative) Selected principles for language designers
Bibliography [Go to Page]

About Us / Careers / support@madcad.com / 1.800.798.9296

MADCAD.com Free Trial

Report To Us

Contact us for a custom quote

⨯To continue with accurate pricing, please select your company type below:

⨯We need your input!

⨯ We need your input!

Cart Warning

BS ISO/IEC 24772-1:2024 - TC Tracked Changes. Programming languages. Avoiding vulnerabilities in programming languages - Language-independent catalogue of vulnerabilities, 2024

⨯To continue with accurate pricing,
please select your company type below: