[cfe-dev] Map of bug types to CWE categories

Zubin Mevawalla via cfe-dev cfe-dev at lists.llvm.org
Wed May 9 07:59:57 PDT 2018


Has anyone created a mapping of the clang static analyzer's bug types
to CWE categories?

For example the bug type, "Undefined allocation of 0 bytes (CERT
MEM04-C; CWE-131)", contains the CWE category in the label. Just
wondering if this info was already compiled anywhere for the other bug
types.

Thanks.



More information about the cfe-dev mailing list