C-PRE-001

Do not create a character name of Universal character set (UCS) through token concatenation

Yes

C-PRE-003

Do not pass preprocessing directives in when calling function-like macros

Yes

C-DCI-001

Do not returning and assigning local variable address

Yes

C-DCI-003

Do not declare or define a reserved identifier

Yes

C-DCI-005

Need to avoid information leakage when passing a structure across a trust boundary

Yes

C-DCI-007

Do not declare variable in a switch statement before the first case label

Yes

C-DCI-009

Do not miss default case in switch statement

Yes

C-DCI-011

Need explicit handling of operator precedence using parentheses [MCU]

Yes

C-INT-002

Ensure that unsigned integer operations do not wrap

Yes

C-INT-004

Ensure that signed integer operations do not overflow [AP, MCU]

Yes

C-INT-006

Do not shift to negative values or shift by more than or equal to the bits of the operands

Yes

C-INT-008

Attention to type conversion between pointer and integer [AP, MCU]

Yes

C-FLP-001

Do not use floating-point variables as loop counters

Yes

C-FLP-003

Preserve precision when converting from integer type to floating-point type

Yes

C-STR-002

Ensure that storage has sufficiently space for character data and the null terminator

Yes

C-STR-004

Argument to character-handling function must be passed as unsigned char

Yes

C-STR-006

Incorrect calculation of the multi-byte string length

Yes

C-EXP-001

Do not ignore return value by functions (CERT Recommendations) [MCU]

Yes

C-EXP-003

Do not reference(access, read) uninitialized memory [Ap, MCU]

Yes

C-EXP-005

Attention when using assignment operator instead of comparison operators [MCU]

Yes

C-EXP-007

Attention to external input not checked for the control condition of the loop [MCU]

Yes

C-EXP-009

Do not null pointer dereference [AP, MCU]

Yes

C-EXP-011

Do not variable access through pointers of incompatible types

Yes

C-EXP-013

Do not compare padding data

Yes

C-EXP-015

Do not pass an expression that changes the value of variable as an operand to sizeof, _Alignof, _Generic

Yes

C-EXP-017

Do not use a bitwise operator with Boolean operand

Yes

C-EXP-019

Do not use of Path Manipulation Function without Maximum-sized Buffer

Yes

C-ARR-001

Ensure that the index is within the valid range for memory read and write operations of the array [AP, MCU]

Yes

C-ARR-003

Do not subtract or compare two pointers that do not reference the same array [AP, MCU]

Yes

C-ARR-005

Do not generate invalid pointer through library functions

Yes

C-ARR-007

Attention for handling length parameters when accessing arrays in loops like the for statements [MCU]

Yes

C-ARR-009

Buffer access using source buffer size

Yes

C-ARR-011

Attention for incorrect judgement of return value by function [MCU]

Yes

C-ERR-001

Attention when calling a library related the errno

Yes

C-ERR-003

Detect errors when converting a string to a number

Yes

C-MEM-002

Free dynamically allocated memory when no longer needed

Yes

C-MEM-004

Free memory allocated dynamically

Yes

C-MEM-006

Do not modify the alignment of object by calling realloc()

Yes

C-FIO-002

Distinguish between characters read from a file and EOF or WEOF

Yes

C-FIO-004

Do not input and output from a stream without an intervening flush or positioning call

Yes

C-FIO-006

Do not call getc(), putc(), getwc() or putwc() with a string argument that changes the value of a variable

Yes

C-FIO-008

Use valid format strings

Yes

C-ENV-002

Do not reference the environment variable pointer after a function is called that contains an operation that invalidates the environment variable pointer

Yes

C-ENV-004

Do not call system()

Yes

C-SIG-001

Only call functions that are asynchronously safe in the signal handler

Yes

C-CON-002

Do not destroy a mutex while it is locked

Yes

C-CON-004

Avoid race conditions when using library functions

Yes

C-CON-006

Lock according to predefine order to avoid deadlock

Yes

C-CON-008

Do not call signal() in a multithreaded program

Yes

C-CON-010

Do not join or detach a thread that was previously joined or detached

Yes

C-MSC-001

Should be treated as 2^16 + 1, ie 65537 in the public key index when using asymmetric key RSA

Yes

C-MSC-003

Do not use the rand() when generating random number using PRNG

Yes

C-MSC-005

Attention to pass improper argument when using the asctime()

Yes

C-MSC-007

Do not access to identifier as an object when a predefined identifier is defined only in macro

Yes

C-MSC-009

Code removal error clearing compiler’s buffer

Yes

C-MSC-011

Do not transmit and store critical security and vehicle information to outside controller in the form of plain text [MCU]

Yes

C-MSC-013

Satisfy a certain level of security when using cryptographic algorithms or hash functions

No

C-MSC-015

Do not use fixed or predictable seeds [MCU]

Yes

C-MSC-017

Validate the certificate and signature of the public key when the sender sends a message using asymmetric key algorithm [MCU]

No

C-POS-002

Do not use for vfork()

Yes

C-POS-004

Attention for racing conditions when using fork and file descriptors

Yes

C-POS-006

Do not use signals to terminate threads

Yes

C-POS-008

Detect and handle POSIX Library errors

Yes

C-POS-010

Attention to leave without development mode, including debug code [MCU]

Yes

C-POS-012

Remove 'Dead Code' [MCU]

Yes