TP312C C Programming Language Secure Coding Standard (汉译：C 安全编码标准)

《TP312C C Programming Language Secure Coding Standard (汉译：C 安全编码标准)》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、LegalNoticeThispagelastchangedonSep10,2007byrcs.CERTCProgrammingLanguageSecureCodingStandardDocumentNo.N1255September10,2007LegalNoticeThisdocumentrepresentsapreliminarydraftoftheCERTCProgrammingLanguageSecureCodingStandard.Thisprojectwasinitiatedfollowingthe2006Berlinmeet

2、ingofWG14toproduceasecurecodingstandardbasedontheC99standard.Althoughthisisanincompletework,wewouldgreatlyappreciateyourcommentsandfeedbackatthistimetofurtherthedevelopmentandrefinementofthematerial.Pleaseprovidecommentsthatarecommensuratewiththeexistingdetailinthedocument

3、.Forexample,ifaruleorrecommendationissimplyastubyoumaywishtocommentifyouthinkhavingaruleorrecommendationinthatareaisunwarranted.ThisworkissponsoredbytheU.S.DepartmentofDefense.TheSoftwareEngineeringInstituteisafederallyfundedresearchanddevelopmentcentersponsoredbytheU.S.De

4、partmentofDefense.Copyright2007CarnegieMellonUniversity.NOWARRANTYTHISCARNEGIEMELLONUNIVERSITYANDSOFTWAREENGINEERINGINSTITUTEMATERIALISFURNISHEDONAN"AS-IS"BASIS.CARNEGIEMELLONUNIVERSITYMAKESNOWARRANTIESOFANYKIND,EITHEREXPRESSEDORIMPLIED,ASTOANYMATTERINCLUDING,BUTNOTLIMITED

5、TO,WARRANTYOFFITNESSFORPURPOSEORMERCHANTABILITY,EXCLUSIVITY,ORRESULTSOBTAINEDFROMUSEOFTHEMATERIAL.CARNEGIEMELLONUNIVERSITYDOESNOTMAKEANYWARRANTYOFANYKINDWITHRESPECTTOFREEDOMFROMPATENT,TRADEMARK,ORCOPYRIGHTINFRINGEMENT.Useofanytrademarksinthisreportisnotintendedinanywaytoin

6、fringeontherightsofthetrademarkholder.Internaluse.Permissiontoreproducethisdocumentandtopreparederivativeworksfromthisdocumentforinternaluseisgranted,providedthecopyrightand"NoWarranty"statementsareincludedwithallreproductionsandderivativeworks.Externaluse.Requestsforpermi

7、ssiontoreproducethisdocumentorpreparederivativeworksofthisdocumentforexternalandcommercialuseshouldbeaddressedtotheSEILicensingAgent.ThisworkwascreatedintheperformanceofFederalGovernmentContractNumberF19628-00-C-0003DocumentgeneratedbyConfluenceonSep10,200713:11Page8withCa

8、rnegieMellonUniversityfortheoperationoftheSoftwareEngineeringInstitute,afederallyfundedre