{"@ID": "747", "@Name": "CERT C Secure Coding Standard (2008) Chapter 14 - Miscellaneous (MSC)", "@Status": "Obsolete", "Summary": "Weaknesses in this category are related to the rules and recommendations in the Miscellaneous (MSC) chapter of the CERT C Secure Coding Standard (2008).", "Relationships": {"Has_Member": [{"@CWE_ID": "14", "@View_ID": "734"}, {"@CWE_ID": "176", "@View_ID": "734"}, {"@CWE_ID": "20", "@View_ID": "734"}, {"@CWE_ID": "330", "@View_ID": "734"}, {"@CWE_ID": "480", "@View_ID": "734"}, {"@CWE_ID": "482", "@View_ID": "734"}, {"@CWE_ID": "561", "@View_ID": "734"}, {"@CWE_ID": "563", "@View_ID": "734"}, {"@CWE_ID": "570", "@View_ID": "734"}, {"@CWE_ID": "571", "@View_ID": "734"}, {"@CWE_ID": "697", "@View_ID": "734"}, {"@CWE_ID": "704", "@View_ID": "734"}]}, "References": {"Reference": {"@External_Reference_ID": "REF-597"}}, "Mapping_Notes": {"Usage": "Prohibited", "Rationale": "This entry is a Grouping. Using groupings for mapping has been discouraged since 2019. They are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.", "Comments": "See member weaknesses of this category.", "Reasons": {"Reason": {"@Type": "Grouping"}}}, "Notes": {"Note": {"@Type": "Relationship", "xhtml:p": "In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:", "xhtml:ul": {"xhtml:li": ["CWE-14 MSC06-C Be aware of compiler optimization when dealing with sensitive data", "CWE-20 MSC08-C Library functions should validate their parameters", "CWE-176 MSC10-C Character Encoding - UTF8 Related Issues", "CWE-330 MSC30-C Do not use the rand() function for generating pseudorandom numbers", "CWE-480 MSC02-C Avoid errors of omission", "CWE-480 MSC03-C Avoid errors of addition", "CWE-482 MSC02-C Avoid errors of omission", "CWE-561 MSC07-C Detect and remove dead code", "CWE-563 MSC00-C Compile cleanly at high warning levels", "CWE-570 MSC00-C Compile cleanly at high warning levels", "CWE-571 MSC00-C Compile cleanly at high warning levels", "CWE-697 MSC31-C Ensure that return values are compared against the proper type", "CWE-704 MSC31-C Ensure that return values are compared against the proper type", "CWE-758 MSC14-C Do not introduce unnecessary platform dependencies", "CWE-758 MSC15-C Do not depend on undefined behavior"]}, "#text_blocks": ["In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:", "CWE-14 MSC06-C Be aware of compiler optimization when dealing with sensitive data", "CWE-20 MSC08-C Library functions should validate their parameters", "CWE-176 MSC10-C Character Encoding - UTF8 Related Issues", "CWE-330 MSC30-C Do not use the rand() function for generating pseudorandom numbers", "CWE-480 MSC02-C Avoid errors of omission", "CWE-480 MSC03-C Avoid errors of addition", "CWE-482 MSC02-C Avoid errors of omission", "CWE-561 MSC07-C Detect and remove dead code", "CWE-563 MSC00-C Compile cleanly at high warning levels", "CWE-570 MSC00-C Compile cleanly at high warning levels", "CWE-571 MSC00-C Compile cleanly at high warning levels", "CWE-697 MSC31-C Ensure that return values are compared against the proper type", "CWE-704 MSC31-C Ensure that return values are compared against the proper type", "CWE-758 MSC14-C Do not introduce unnecessary platform dependencies", "CWE-758 MSC15-C Do not depend on undefined behavior"]}}, "Content_History": {"Submission": {"Submission_Name": "CWE Content Team", "Submission_Organization": "MITRE", "Submission_Date": "2008-11-24", "Submission_Version": "1.1", "Submission_ReleaseDate": "2008-11-24"}, "Modification": [{"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2017-11-08", "Modification_Version": "3.0", "Modification_ReleaseDate": "2017-11-08", "Modification_Comment": "updated Description, Name, Relationship_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2019-01-03", "Modification_Version": "3.2", "Modification_ReleaseDate": "2019-01-03", "Modification_Comment": "updated Description, Name, References"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2023-04-27", "Modification_Version": "4.11", "Modification_ReleaseDate": "2023-04-27", "Modification_Comment": "updated Mapping_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2023-06-29", "Modification_Version": "4.12", "Modification_ReleaseDate": "2023-06-29", "Modification_Comment": "updated Mapping_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2026-10-28", "Modification_Version": "5.0", "Modification_ReleaseDate": "2026-10-28", "Modification_Comment": "updated Mapping_Notes, Type"}], "Previous_Entry_Name": [{"@Date": "2017-11-08", "#text": "CERT C Secure Coding Section 49 - Miscellaneous (MSC)"}, {"@Date": "2019-01-03", "#text": "CERT C Secure Coding (2008 Version) Section 49 - Miscellaneous (MSC)"}]}, "entry_type": "Grouping"}