REVERSE_INULL

EXP34-C. Do not dereference null pointers

CONSTANT_EXPRESSION_RESULT

EXP17-C. Do not perform bitwise operations in conditional expressions

STACK_USE

MEM05-C. Avoid large stack allocations

FORWARD_NULL

EXP34-C. Do not dereference null pointers

NULL_RETURNS

EXP34-C. Do not dereference null pointers

NEGATIVE_RETURNS

INT31-C. Ensure that integer conversions do not result in lost or misinterpreted data

ARRAY_VS_SINGLETON

ARR30-C. Do not form or use out of bounds pointers or array subscripts

CHAR_IO

FIO34-C. Use int to capture the return value of character IO functions

BAD_COMPARE

MSC02-C. Avoid errors of omission

RETURN_LOCAL

DCL30-C. Declare objects with appropriate storage durations

OVERRUN_DYNAMIC

STR35-C. Do not copy data from an unbounded source to a fixed-length array

MISSING_BREAK

MSC17-C. Finish every set of statements associated with a case label with a break statement

USE_AFTER_FREE

MEM31-C. Free dynamically allocated memory exactly once

NO_EFFECT

MSC12-C. Detect and remove code that has no effect

RESOURCE_LEAK

MEM31-C. Free dynamically allocated memory exactly once

BAD_ALLOC_STRLEN

MEM35-C. Allocate sufficient memory for an object

UNREACHABLE

MSC07-C. Detect and remove dead code

BAD_FREE

MEM34-C. Only free memory allocated dynamically

OVERRUN_STATIC

STR35-C. Do not copy data from an unbounded source to a fixed-length array

DEADCODE

MSC07-C. Detect and remove dead code

REVERSE_NEGATIVE

INT31-C. Ensure that integer conversions do not result in lost or misinterpreted data

MISRA_CAST

INT31-C. Ensure that integer conversions do not result in lost or misinterpreted data

UNUSED_VALUE

MSC13-C. Detect and remove unused values

ASSERT_SIDE_EFFECT

MSC11-C. Incorporate diagnostic tests using assertions

EVALUATION_ORDER

EXP30-C. Do not depend on order of evaluation between sequence points

SIZECHECK

MEM35-C. Allocate sufficient memory for an object

CHECKED_RETURN

MEM32-C. Detect and handle memory allocation errors

BAD_OVERRIDE

No equivalent

CTOR_DTOR_LEAK

No equivalent

DELETE_ARRAY

No equivalent

INVALIDATE_ITERATOR

https://www.securecoding.cert.org/confluence/display/cplusplus/STL30-C.+Use+Valid+Iterators

PASS_BY_VALUE

No equivalent

UNCAUGHT_EXCEPT

https://www.securecoding.cert.org/confluence/display/cplusplus/ERR30-C.+Check+for+all+error+conditions

UNINIT_CTOR

No equivalent

WRAPPER_ESCAPE

No equivalent

LOCK

Out of scope

ORDER_REVERSAL

Out of scope

SLEEP

Out of scope

BUFFER_SIZE

STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator, ARR33-C. Guarantee that copies are made into storage of sufficient size

CHROOT

Out of scope

OPEN_ARGS

FIO03-C. Do not make assumptions about fopen() and file creation

READLINK

POS30-C. Use the readlink() function properly

SECURE_CODING

STR35-C. Do not copy data from an unbounded source to a fixed-length array, others?

SECURE_TEMP

FIO43-C. Do not create temporary files in shared directories, TMPxx-C. Temporary file names must be unique when the file is created

STRING_OVERFLOW

STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator

STRING_NULL

STR32-C. Null-terminate byte strings as required

STRING_SIZE

STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator

TAINTED_SCALAR

VOID Guarantee that array indices are within the valid range, INT31-C. Ensure that integer conversions do not result in lost or misinterpreted data, INT32-C. Ensure that operations on signed integers do not result in overflow

TAINTED_STRING

STR02-C. Sanitize data passed to complex subsystems, FIO30-C. Exclude user input from format strings, FIO02-C. Canonicalize path names originating from untrusted sources

TOCTOU

FIO03-C. Do not make assumptions about fopen() and file creation, FIO01-C. Be careful using functions that use file names for identification, FIO08-C. Take care when calling remove() on an open file, others?

USER_POINTER

No equivalent