Information technology — Programming languages, their environments and system software interfaces — C secure coding rules

Amended by

ISO/IEC TS 17961:2013/Cor 1:2016

Available format(s)

Hardcopy , PDF , PDF 3 Users , PDF 5 Users , PDF 9 Users

Published date

11-15-2013

Publisher

International Organization for Standardization

ISO/IEC TS 17961:2013 specifies

ISO/IEC TS 17961:2013 does not specify

Each rule in this Technical Specification is accompanied by code examples. Two distinct kinds of examples are provided:

noncompliant examples demonstrating language constructs that have weaknesses with potentially exploitable security implications; such examples are expected to elicit a diagnostic from a conforming analyzer for the affected language construct; and
compliant examples are expected not to elicit a diagnostic.

Committee	ISO/IEC JTC 1/SC 22
DocumentType	Standard
Pages	80
PublisherName	International Organization for Standardization
Status	Current

ISO/IEC 2382-1:1993	Information technology Vocabulary Part 1: Fundamental terms
ISO/IEC 11889-1:2015	Information technology Trusted platform module library Part 1: Architecture
ISO/IEC TR 24772:2013	Information technology Programming languages Guidance to avoiding vulnerabilities in programming languages through language selection and use
ISO 80000-2:2009	Quantities and units Part 2: Mathematical signs and symbols to be used in the natural sciences and technology
ISO/IEC 9899:2011	Information technology Programming languages C
ISO/IEC/IEEE 9945:2009	Information technology — Portable Operating System Interface (POSIX®) Base Specifications, Issue 7
ISO/IEC TR 24731-2:2010	Information technology Programming languages, their environments and system software interfaces Extensions to the C library Part 2: Dynamic Allocation Functions
IEEE/Open Group 1003.1, 2013 Edition	IEEE Standard for Information Technology—Portable Operating System Interface (POSIX(TM)) Base Specifications, Issue 7