Information technology — Programming languages, their environments and system software interfaces — C secure coding rules
信息技术——编程语言及其环境和系统软件接口——C安全编码规则
rules for secure coding in the C programming language, and
code examples.
ISO/IEC TS 17961:2013 does not specify
the mechanism by which these rules are enforced, or
any particular coding style to be enforced.
Each rule in this Technical Specification is accompanied by code examples. Two distinct kinds of examples are provided:
noncompliant examples demonstrating language constructs that have weaknesses with potentially exploitable security implications; such examples are expected to elicit a diagnostic from a conforming analyzer for the affected language construct; and
compliant examples are expected not to elicit a diagnostic.