generated from ossf/project-template
-
Notifications
You must be signed in to change notification settings - Fork 122
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Python guide: Doc2GitHub, moving code from an Ericsson internal confluence to this GitHub space. #531
Comments
Merged
@SecurityCRob I wonder what the best handling is. I could start |
myteron
added a commit
to myteron/wg-best-practices-os-developers
that referenced
this issue
Jun 21, 2024
Signed-off-by: Helge Wehder <helge.wehder@ericsson.com>
Merged
myteron
added a commit
to myteron/wg-best-practices-os-developers
that referenced
this issue
Jun 28, 2024
CWE-197 Control rounding when converting to less precise numbers Prior to moving doc as part of ossf#531 Signed-off-by: Helge Wehder <helge.wehder@ericsson.com>
myteron
added a commit
to myteron/wg-best-practices-os-developers
that referenced
this issue
Jun 28, 2024
…ess precise numbers for ossf#531 Signed-off-by: Helge Wehder <helge.wehder@ericsson.com>
tommcd
added a commit
to tommcd/wg-best-practices-os-developers
that referenced
this issue
Jul 29, 2024
Signed-off-by: emcdtho <thomas.mcdermott@ericsson.com>
Merged
myteron
added a commit
to myteron/wg-best-practices-os-developers
that referenced
this issue
Aug 8, 2024
Signed-off-by: Helge Wehder <helge.wehder@ericsson.com>
Merged
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
There are around 40 rules on and Ericsson internal confluence that have approval by Ericsson Opensource group to be published. Some of the text and code requires refactoring and this work can only be done by Ericsson employees.
Once all docs are made available in GitHub we have:
Plain text : Nothing on GitHub
Link Only : Code on GitHub
Link Only: Code and Docs on GitHubFull List:
CWE-78, Improper Neutralization of Special Elements Used in an OS Command ("OS Command Injection")
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-116: Prevent XML Injection
CWE-117: Improper Output Neutralization for Logs
CWE-134: Use of Externally-Controlled Format StringCWE-175: Improper Handling of Mixed Encoding
CWE-180: Incorrect Behavior Order: Validate Before Canonicalize
CWE-184: Incomplete List of Disallowed Input
CWE-191: Integer Underflow (Wrap or Wraparound)CWE-197: Control rounding when converting to less precise numbers
CWE-197: Numeric Truncation Error
CWE-209: Generation of Error Message Containing Sensitive Information
CWE-230: Improper Handling of Missing Values
CWE-252: Unchecked Return Value
CWE-330: Use of Insufficiently Random Values
CWE-362, Concurrent Execution Using Shared Resource with Improper Synchronization ("Race Condition")
CWE-366, Race Condition within a Thread
CWE-369, Divide by Zero
CWE-390, Detection of Error Condition without Action
CWE-392: Missing Report of Error ConditionCWE-397, Declaration of Throws for Generic Exception
CWE-400: Uncontrolled Resource ConsumptionCWE-404: Improper Resource Shutdown or Release
CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)
CWE-410: Insufficient Resource PoolCWE-426: Untrusted Search PathCWE-460: Improper Cleanup on Thrown Exception
CWE-472: External Control of Assumed-Immutable Web Parameter
CWE-476, NULL Pointer Dereference
CWE-489: Do not deliver an Application with Design tooling into Production.
CWE-501: Trust Boundary Violation)CWE-502: Deserialization of Untrusted Data)CWE-532: Insertion of Sensitive Information into Log File
CWE-584: Return Inside Finally Block
CWE-595: Comparison of Object References Instead of Object Contents
CWE-617: Reachable Assertion
CWE-665: Improper InitializationCWE-681: Avoid an uncontrolled loss of precision when passing floating-point literals to a Decimal constructor
CWE-681: Incorrect Conversion between Numeric Types
CWE-754: Improper Check for Unusual or Exceptional Conditions
CWE-755: Improper Handling of Exceptional Conditions
CWE-778: Insufficient Logging
CWE-798: Use of hardcoded credentials
CWE-833: DeadlockCWE-838: Inappropriate Encoding for Output Context
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
CWE-1095: Loop Condition Value Update within the LoopCWE-1109: Use of Same Variable for Multiple Purposes
CWE-1335: Incorrect Bitwise Shift of Integer
CWE-1335: Promote readability and compatibility by using mathematical written code with arithmetic operations instead of bit-wise operationsCWE-1339: Insufficient Precision or Accuracy of a Real Number
XXX-001: Avoid confusion over the evaluation order by using simple expressions
XXX-005: Consider hash-based integrity verification of byte code files against their source code files
The text was updated successfully, but these errors were encountered: