Skip to main content
assistive.skiplink.to.breadcrumbs
assistive.skiplink.to.header.menu
assistive.skiplink.to.action.menu
assistive.skiplink.to.quick.search

02. Declarations and Initialization (DCL)

Created by Admin, last modified by Robert Seacord on Dec 20, 2008

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Recommendations

DCL00-C. Const-qualify immutable objects

DCL01-C. Do not reuse variable names in subscopes

DCL02-C. Use visually distinct identifiers

DCL03-C. Use a static assertion to test the value of a constant expression

DCL04-C. Do not declare more than one variable per declaration

DCL05-C. Use typedefs to improve code readability

DCL06-C. Use meaningful symbolic constants to represent literal values in program logic

DCL07-C. Include the appropriate type information in function declarators

DCL08-C. Properly encode relationships in constant definitions

DCL09-C. Declare functions that return an errno error code with a return type of errno_t

DCL10-C. Maintain the contract between the writer and caller of variadic functions

DCL11-C. Understand the type issues associated with variadic functions

DCL12-C. Implement abstract data types using opaque types

DCL13-C. Declare function parameters that are pointers to values not changed by the function as const

DCL14-C. Do not make assumptions about the order of global variable initialization across translation units

DCL15-C. Declare objects or functions that do not need external linkage with the storage-class specifier static

DCL16-C. Use 'L', not 'l', to indicate a long value

Rules

DCL30-C. Declare objects with appropriate storage durations

DCL31-C. Declare identifiers before using them

DCL32-C. Guarantee that mutually visible identifiers are unique

DCL33-C. Ensure that restrict-qualified source and destination pointers in function arguments do not reference overlapping objects

DCL34-C. Use volatile for data that cannot be cached

DCL35-C. Do not invoke a function using a type that does not match the function definition

DCL36-C. Do not declare an identifier with conflicting linkage classifications

Risk Assessment Summary

Recommendation	Severity	Likelihood	Remediation Cost	Priority	Level
DCL00-C	low	unlikely	high	P1	L3
DCL01-C	low	unlikely	medium	P2	L3
DCL02-C	low	unlikely	medium	P2	L3
DCL03-C	low	unlikely	high	P1	L3
DCL04-C	low	unlikely	low	P3	L3
DCL05-C	low	unlikely	medium	P2	L3
DCL06-C	low	unlikely	medium	P2	L3
DCL07-C	low	unlikely	low	P3	L3
DCL08-C	low	unlikely	high	P1	L3
DCL09-C	low	unlikely	low	P3	L3
DCL10-C	high	probable	high	P6	L2
DCL11-C	high	probable	high	P6	L2
DCL12-C	low	unlikely	high	P1	L3
DCL13-C	low	unlikely	low	P3	L3
DCL14-C	medium	probable	medium	P8	L2
DCL15-C	low	unlikely	low	P3	L3

Rule	Severity	Likelihood	Remediation Cost	Priority	Level
DCL30-C	high	probable	high	P6	L2
DCL31-C	low	unlikely	low	P3	L3
DCL32-C	medium	unlikely	low	P6	L2
DCL33-C	medium	probable	high	P4	L3
DCL34-C	low	probable	high	P2	L3
DCL35-C	low	probable	medium	P4	L3
DCL36-C	medium	probable	medium	P8	L2

PRE31-C. Never invoke an unsafe macro with arguments containing assignment, increment, decrement, volatile access, or function call CERT C Secure Coding Standard

No labels