CWE entries in this view (graph) are fully or partially eliminated by following the guidance presented in the online wiki that reflects that current rules and recommendations of the SEI CERT C Coding Standard.
By following the SEI CERT C Coding Standard, developers will be able to fully or partially prevent the weaknesses that are identified in this view. In addition, developers can use a CWE coverage graph to determine which weaknesses are not directly addressed by the standard, which will help identify and resolve remaining gaps in training, tool acquisition, or other approaches for reducing weaknesses.
If a software developer claims to be following the SEI CERT C Coding standard, then customers can search for the weaknesses in this view in order to formulate independent evidence of that claim.
Educators can use this view in multiple ways. For example, if there is a focus on teaching weaknesses, the educator could link them to the relevant Secure Coding Standard.
|CWE-1155||SEI CERT C编码标准-准则01.预处理程序（PRE）|
|CWE-1156||SEI CERT C编码标准-准则02.声明和初始化（DCL）|
|CWE-1157||SEI CERT C编码标准-准则03.表达式（EXP）|
|CWE-1158||SEI CERT C编码标准-准则04.整数（INT）|
|CWE-1159||SEI CERT C编码标准-准则05.浮点（FLP）|
|CWE-1160||SEI CERT C编码标准-准则06.数组（ARR）|
|CWE-1161||SEI CERT C编码标准-准则07.字符和字符串（STR）|
|CWE-1162||SEI CERT C编码标准-准则08.内存管理（MEM）|
|CWE-1163||SEI CERT C编码标准-准则09.输入输出（FIO）|
|CWE-1165||SEI CERT C编码标准-准则10.环境（ENV）|
|CWE-1166||SEI CERT C编码标准-准则11.信号（SIG）|
|CWE-1167||SEI CERT C编码标准-准则12.错误处理（ERR）|
|CWE-1168||SEI CERT C编码标准-准则13.应用程序编程接口（API）|
|CWE-1169||SEI CERT C编码标准-准则14.并发性（CON）|
|CWE-1170||SEI CERT C编码标准-准则48.其他（MSC）|
|CWE-1171||SEI CERT C编码标准-准则50.POSIX（POS）|
|CWE-1172||SEI CERT C编码标准-准则51. Microsoft Windows（WIN）|
The relationships in this view were determined based on specific statements within the rules from the standard. Not all rules have direct relationships to individual weaknesses, although they likely have chaining relationships in specific circumstances.