SEI CERT C Coding Standard

Space shortcuts

Page tree

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 39 Next »

DCL31-C. Declare identifiers before using them
FIO09-C. Be careful with binary data when transferrin- g data across systems
FIO02-C. Canonicaliz- e path names originating from tainted sources
FIO13-C. Never push back anything other than one read character
FIO20-C. Avoid unintention- al truncation when using fgets() or fgetws()
FIO30-C. Exclude user input from format strings
FIO37-C. Do not assume that fgets() or fgetws() returns a nonempty string when successful
FIO39-C. Do not alternately input and output from a stream without an intervening flush or positioning call
FIO40-C. Reset strings on fgets() or fgetws() failure
INT05-C. Do not use input functions to convert character data if they cannot handle all possible inputs
FIO41-C. Do not call getc(), putc(), getwc(), or putwc() with a stream argument that has side effects
INT07-C. Use only explicitly signed or unsigned char type for numeric values
MSC09-C. Character encoding: Use subset of ASCII for safety
MSC10-C. Character encoding: UTF8-relate- d issues

0.5. Preprocessor (PRE)

00. Declarations and Initialization (DCL)

01. Expressions (EXP)

02. Integers (INT)

03. Floating Point (FLP)

04. Arrays (ARR)

05. Strings (STR)

06. Memory Management Functions (MEM)

07. Formatted Input Output Functions (FRM)

08. Miscellaneous (MSC)

09. File Input Output (FIO)

50. POSIX

AA. C References

BB. Definitions

  • No labels