Increasingly, the Common Weakness Enumeration (CWE), administered by The MITRE Corporation, is being used as a reference for system weaknesses, whether hardware- or software- related, and irrespective as to the programming language used. Many of the enumerations will be relevant to high-integrity software written in C, and this document will map those that are covered by guidance within the MISRA C guidelines. This first subset focusses on the weaknesses tagged as being relevant to memory safety (category CWE-1399), an area where some commentators are now suggesting makes the C programming language unsuitable for high-integrity software – the MISRA C Working Group respectfully disagrees with this assertion, and this document provides our evidence to support our position that C, with appropriate controls, provides a suitable language for developing safety- and security-related environments.

Back to posts