Skip to content

Commit c4cecc3

Browse files
RH-steve-grubbkdudka
authored andcommitted
Add more gcc CWE mappings
GCC 13 brings more gcc-analyzer warning types. This adds coverage for many new ones. Also, adds a couple newly detected gcc warnings.
1 parent 894860f commit c4cecc3

1 file changed

Lines changed: 22 additions & 0 deletions

File tree

cwe-map.csv

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,7 @@
3636
"COMPILER_WARNING","warning[-Waddress-of-packed-member]","CWE-465"
3737
"COMPILER_WARNING","warning[-Walloc-size-larger-than]","CWE-789"
3838
"COMPILER_WARNING","warning[-Warray-bounds]","CWE-788"
39+
"COMPILER_WARNING","warning[-Warray-compare]","CWE-595"
3940
"COMPILER_WARNING","warning[-Warray-parameter]","CWE-1228"
4041
"COMPILER_WARNING","warning[-Wattribute-warning]","CWE-9001"
4142
"COMPILER_WARNING","warning[-Wattributes]","CWE-9001"
@@ -50,6 +51,7 @@
5051
"COMPILER_WARNING","warning[-Wclobbered]","CWE-758"
5152
"COMPILER_WARNING","warning[-Wcomment]","CWE-9001"
5253
"COMPILER_WARNING","warning[-Wdangling-else]","CWE-691"
54+
"COMPILER_WARNING","warning[-Wdangling-pointers]","CWE-825"
5355
"COMPILER_WARNING","warning[-Wdeprecated]","CWE-477"
5456
"COMPILER_WARNING","warning[-Wdeprecated-copy-dtor]","CWE-477"
5557
"COMPILER_WARNING","warning[-Wdeprecated-copy]","CWE-477"
@@ -73,6 +75,7 @@
7375
"COMPILER_WARNING","warning[-Wimplicit-function-declaration]","CWE-686"
7476
"COMPILER_WARNING","warning[-Wimplicit-int]","CWE-573"
7577
"COMPILER_WARNING","warning[-Wincompatible-pointer-types]","CWE-843"
78+
"COMPILER_WARNING","warning[-Winfinite-recursion]","CWE-674"
7679
"COMPILER_WARNING","warning[-Winline]","CWE-9001"
7780
"COMPILER_WARNING","warning[-Wint-conversion]","CWE-704"
7881
"COMPILER_WARNING","warning[-Wint-in-bool-context]","CWE-670"
@@ -300,17 +303,36 @@
300303
"FORWARD_NULL","unbox_null","CWE-476"
301304
"FORWARD_NULL","var_deref_model","CWE-476"
302305
"FORWARD_NULL","var_deref_op","CWE-476"
306+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-allocation-size]","CWE-131"
307+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-deref-before-check]","CWE-465"
303308
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-double-fclose]","CWE-910"
304309
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-double-free]","CWE-415"
310+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-fd-double-close]","CWE-1341"
311+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-fd-leak]","CWE-775"
312+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-fd-use-after-close]","CWE-910"
305313
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-file-leak]","CWE-775"
306314
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-free-of-non-heap]","CWE-590"
315+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-infinite-recursion]","CWE-"674
316+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-jump-through-null]","CWE-476"
307317
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-malloc-leak]","CWE-401"
318+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-mismatching-deallocation]","CWE-762"
308319
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-null-argument]","CWE-688"
309320
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-null-dereference]","CWE-476"
310321
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-possible-null-argument]","CWE-688"
311322
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-possible-null-dereference]","CWE-476"
323+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-putenv-of-auto-var]","CWE-686"
324+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-shift-count-negative]","CWE-1335"
325+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-shift-count-overflow]","CWE-1335"
312326
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-unsafe-call-within-signal-handler]","CWE-479"
313327
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-use-after-free]","CWE-416"
328+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-use-of-pointer-in-stale-stack-frame]","CWE-825"
329+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-use-of-uninitialized-value]","CWE-457"
330+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-va-arg-type-mismatch]","CWE-686"
331+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-va-list-exhausted]","CWE-685"
332+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-va-list-leak]","CWE-404"
333+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-va-list-use-after-va-end]","CWE-672"
334+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-write-to-const]","CWE-471"
335+
"GCC_ANALYZER_WARNING","warning[-Wanalyzer-write-to-string-literal]","CWE-471"
314336
"GITLEAKS_WARNING","error[too-many]","CWE-540"
315337
"GITLEAKS_WARNING","warning[aws-access-token]","CWE-540"
316338
"GITLEAKS_WARNING","warning[gcp-api-key]","CWE-540"

0 commit comments

Comments
 (0)