SEI CERT C Coding Standard

Space shortcuts

Page tree

Versions Compared

Old Version 61

changes.mady.by.user Robert Seacord (Manager)

Saved on

compared with

New Version 62

changes.mady.by.user Martin Sebor

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Used {contentbylabel} macro to automatically update tables.

Recommendations

ENV00-C. Do not store the pointer to the string returned by getenv()

ENV01-C. Do not make assumptions about the size of an environment variable

ENV02-C. Beware of multiple environment variables with the same effective name

ENV03-C. Sanitize the environment when invoking external programs

ENV04-C. Do not call system() if you do not need a command processor

Rules

ENV30-C. Do not modify the object referenced by the return value of certain functions

ENV31-C. Do not rely on an environment pointer following an operation that may invalidate it

...

Content by Label
showLabelsfalse
maxResults99
label+env,+recommendation,-void
showSpacefalse
sorttitle
space@self
cqllabel = "recommendation" and label = "env" and label != "void" and space = currentSpace()
Info

Information for Editors
In order to have a new guideline automatically listed above be sure to label it env and recommendation.

Rules

Content by Label
showLabelsfalse
maxResults99
label+env,+rule,-void
showSpacefalse
sorttitle
space@self
cqllabel = "rule" and label = "env" and label != "void" and space = currentSpace()
Info

Information for Editors
In order to have a new guideline automatically listed above be sure to label it env and rule.

Risk Assessment Summary

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

ENV00-C

low

probable

medium

P4

L3

ENV01-C

high

likely

medium

P18

L1

ENV02-C

low

unlikely

medium

P2

L3

ENV03-C

high

likely

high

P9

L2

ENV04-C

high

probable

medium

P12

L1

...