Page Information

Title:	MSC06-C. Beware of compiler optimizations
Author:	Joe Damato	Apr 27, 2007
Last Changed by:	Michal Rozenau	Jul 04, 2022
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/PtYxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (3)     Page: MSC18-C. Be careful while handling sensitive data, such as passwords, in program code     Page: MSC24-C. Do not use deprecated or obsolescent functions     Page: MEM03-C. Clear sensitive information stored in reusable resources

Parent Page     Page: Rec. 48. Miscellaneous (MSC)

• android-applicable
• sidebar
• crypto
• windows
• unenforceable
• recommendation
• msc

Time	Editor
Jul 04, 2022 07:06	Michal Rozenau	View Changes
Parasoft C/C++test added
Jun 24, 2021 09:39	Svyatoslav Razmyslov	View Changes
Mar 03, 2021 15:06	Kris Kafka	View Changes
Added PC-lint Plus to Automated Detection Table
Jun 30, 2020 14:07	David Svoboda	View Changes
Mar 27, 2018 09:37	Svyatoslav Razmyslov

External Links (15)
    https://pvs-studio.com/en/docs/warnings/v597/
    https://pvs-studio.com/en/docs/warnings/v712/
    https://buildsecurityin.us-cert.gov/daisy/bsi-rules/home/g1…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/
    msdn.microsoft.com/en-us/library/chh3fb0k%28VS.80%29.aspx
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/PVS-Studio
    cwe.mitre.org/data/definitions/14.html
    https://www.securecoding.cert.org/confluence/display/seccod…
    www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/prot…
    msdn.microsoft.com/en-us/library/aa366877.aspx
    https://www.viva64.com/en/b/0388/

SEI CERT C Coding Standard (12)     Page: CodeSonar     Page: AA. Bibliography     Page: PC-lint Plus_V     Page: Parasoft_V     Page: BB. Definitions     Home page: SEI CERT C Coding Standard     Page: CodeSonar_V     Page: Parasoft     Page: LDRA     Page: LDRA_V     Page: PVS-Studio_V     Page: PC-lint Plus

SEI CERT Oracle Coding Standard for Java (2)     Home page: SEI CERT Oracle Coding Standard for Java     Page: MSC01-J. Do not use an empty infinite loop

SEI CERT C++ Coding Standard (2)     Home page: SEI CERT C++ Coding Standard     Page: VOID MSC06-CPP. Be aware of compiler optimization when dealing with sensitive data