SEI CERT C Coding Standard

Miscellaneous (MSC) - MSC32-C. Properly seed pseudorandom number generators
}
}
The output is as follows:
1st run: -1597837311, 906130682, -1308031886, 1048837407, -
931041900, -658114613, -1709220953, -1019697289,
1802206541,406505841,
2nd run: 885904119, -687379556, -1782296854, 1443701916, -
624291047, 2049692692, -990451563, -142307804,
1257079211,897185104,
3rd run: 190598304, -1537409464, 1594174739, -424401916, -
1975153474, 826912927, 1705549595, -1515331215,
474951399, 1982500583,
15.2.4 Risk Assessment
Rule Severity Likelihood Remediation Cost Priority Level
MSC32-C Medium Likely Low P18 L1
15.2.5 Related Guidelines
CERT C Secure Coding Standard
SEI CERT C++ Coding Standard
MITRE CWE
MSC30-C. Do not use the rand() function for
generating pseudorandom numbers
MSC51-CPP. Ensure your random number
generator is properly seeded
CWE-327, Use of a Broken or Risky Cryptographic
Algorithm
CWE-330, Use of Insufficiently Random Values
CWE-331, Insufficient Entropy
CWE-338, Use of Cryptographically Weak
Pseudo-Random Number Generator (PRNG)
15.2.6 Bibliography
[MSDN]
“CryptGenRandom Function“
SEI CERT C Coding Standard: Rules for Developing Safe, Reliable, and Secure Systems 462
Software Engineering Institute | Carnegie Mellon University
[DISTRIBUTION STATEMENT A] Approved for public release and unlimited distribution.