...
ARR37-C. Do not add or subtract an integer to a pointer to a non-array object -started cjohns 4/8
...
For FIO39-C. Do not read in from a stream directly following output to that stream Can we rewrite the NCCE and compliant solution as a function or use another mechanism so we don't need to specify the name of the device. Unfortunately device names such as "/dev/device2" appear to be OS specific. Perhaps check this section for other instances of this problem as well.
...
The Risk Assessment Summary tables for each section need to be updated (they are out of date with the actual rules). - I got as far as EXP07, which still has the risk assessment for EXP10
...