Page Information

Title:	MEM03-C. Clear sensitive information stored in reusable resources
Author:	Jeffrey Gennari	Jan 08, 2007
Last Changed by:	Francesco Mariani	Aug 31, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/VNcxBQ
Export As:	Word · PDF

Parent Page     Page: Rec. 08. Memory Management (MEM)

• rose-false-positive
• compass/rose
• android-applicable
• crypto
• recommendation
• mem
• cwe-209
• klocwork

Time	Editor
Aug 31, 2025 04:31	Francesco Mariani	View Changes
May 20, 2025 08:02	Jill Britton	View Changes
REM Cost Reform
Apr 20, 2023 06:16	Jill Britton	View Changes
Jul 04, 2022 07:04	Michal Rozenau	View Changes
Parasoft C/C++test added.
Jun 25, 2021 04:21	Svyatoslav Razmyslov

External Links (10)
    https://www.mathworks.com/help/bugfinder/ref/certcrec.mem03…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/PVS-Studio
    cwe.mitre.org/data/definitions/244.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/
    https://pvs-studio.com/en/docs/warnings/v1072/
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/data/definitions/226.html
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…

SEI CERT C Coding Standard (20)     Page: CodeSonar_V     Page: Parasoft     Page: LDRA     Home page: SEI CERT C Coding Standard     Page: PVS-Studio_V     Page: INT30-C. Ensure that unsigned integer operations do not wrap     Page: Parasoft_V     Page: BB. Definitions     Page: MEM07-C. Ensure that the arguments to calloc(), when multiplied, do not wrap     Page: Helix QAC     Page: Polyspace Bug Finder     Page: AA. Bibliography     Page: Helix QAC_V     Page: Polyspace Bug Finder_V     Page: Security Reviewer - Static Reviewer     Page: MSC06-C. Beware of compiler optimizations     Page: Security Reviewer - Static Reviewer_V     Page: Rose     Page: CodeSonar     Page: LDRA_V