Page Information

Title:	MSC06-C. Beware of compiler optimizations
Author:	Joe Damato	Apr 27, 2007
Last Changed by:	Valery	Jun 11, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/PtYxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (3)     Page: MSC18-C. Be careful while handling sensitive data, such as passwords, in program code     Page: MSC24-C. Do not use deprecated or obsolescent functions     Page: MEM03-C. Clear sensitive information stored in reusable resources

Parent Page     Page: Rec. 48. Miscellaneous (MSC)

• android-applicable
• sidebar
• crypto
• windows
• unenforceable
• recommendation
• msc

Time	Editor
Jun 11, 2025 02:40	Valery	View Changes
May 29, 2025 13:30	Richard W. Laughlin	View Changes
Removed references to Annex K.
May 20, 2025 09:22	David Svoboda	View Changes
REM Cost Reform
Jul 04, 2022 07:06	Michal Rozenau	View Changes
Parasoft C/C++test added
Jun 24, 2021 09:39	Svyatoslav Razmyslov

External Links (16)
    https://pvs-studio.com/en/docs/warnings/v597/
    https://pvs-studio.com/en/docs/warnings/v712/
    https://buildsecurityin.us-cert.gov/daisy/bsi-rules/home/g1…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/
    msdn.microsoft.com/en-us/library/chh3fb0k%28VS.80%29.aspx
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://pvs-studio.com/en/docs/warnings/v1001/
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/PVS-Studio
    cwe.mitre.org/data/definitions/14.html
    https://www.securecoding.cert.org/confluence/display/seccod…
    www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/prot…
    msdn.microsoft.com/en-us/library/aa366877.aspx
    https://www.viva64.com/en/b/0388/

SEI CERT C Coding Standard (12)     Page: CodeSonar     Page: AA. Bibliography     Page: PC-lint Plus_V     Page: Parasoft_V     Page: BB. Definitions     Home page: SEI CERT C Coding Standard     Page: CodeSonar_V     Page: Parasoft     Page: LDRA     Page: LDRA_V     Page: PVS-Studio_V     Page: PC-lint Plus

SEI CERT Oracle Coding Standard for Java (2)     Home page: SEI CERT Oracle Coding Standard for Java     Page: MSC01-J. Do not use an empty infinite loop

SEI CERT C++ Coding Standard (2)     Home page: SEI CERT C++ Coding Standard     Page: VOID MSC06-CPP. Be aware of compiler optimization when dealing with sensitive data