CWE CATEGORY: CERT C Secure Coding Standard (2008) Chapter 12 - Signals (SIG)
Category ID: 745
Vulnerability Mapping:PROHIBITEDThis CWE ID must not be used to map to real-world vulnerabilities
Summary
Weaknesses in this category are related to the rules and recommendations in the Signals (SIG) chapter of the CERT C Secure Coding Standard (2008).
Membership
Nature
Type
ID
Name
MemberOf
View - a subset of CWE entries that provides a way of examining CWE content. The two main view structures are Slices (flat lists) and Graphs (containing relationships between entries).
Variant - a weakness that is linked to a certain type of product, typically involving a specific language or technology. More specific than a Base weakness. Variant level weaknesses typically describe issues in terms of 3 to 5 of the following dimensions: behavior, property, technology, language, and resource.
Class - a weakness that is described in a very abstract fashion, typically independent of any specific language or technology. More specific than a Pillar Weakness, but more general than a Base Weakness. Class level weaknesses typically describe issues in terms of 1 or 2 of the following dimensions: behavior, property, and resource.
(this CWE ID must not be used to map to real-world vulnerabilities)
Reason:
Category
Rationale:
This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Comments:
See member weaknesses of this category.
Notes
Relationship
In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:
CWE-432 SIG00-C Mask signals handled by noninterruptible signal handlers
CWE-479 SIG30-C Call only asynchronous-safe functions within signal handlers
CWE-479 SIG32-C Do not call longjmp() from inside a signal handler
CWE-479 SIG33-C Do not recursively invoke the raise() function
CWE-479 SIG34-C Do not call signal() from within interruptible signal handlers
CWE-662 SIG00-C Mask signals handled by noninterruptible signal handlers
CWE-662 SIG31-C Do not access or modify shared objects in signal handlers
CWE-828 SIG31-C Do not access or modify shared objects in signal handlers
References
[REF-597] Robert C. Seacord. "The CERT C Secure Coding Standard". 1st Edition. Addison-Wesley Professional. 2008-10-14.