Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: sync with book

...

In the following noncompliant code example, unsafe characters are used as part of a file name.

...

CERT C Secure Coding Standard

MSC09-C. Character Encoding - Use Subset of ASCII for Safety

CERT C++ Secure Coding Standard

MSC09-CPP. Character Encoding - Use Subset of ASCII for Safety

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="7055f2548eb0063f-ae038eb5-493b4f13-b1cea8e9-3e22f7ae48f6047bfb8d3813"><ac:plain-text-body><![CDATA[

[ISO/IEC TR 24772:2010

http://www.aitcnet.org/isai/]

"Choice of Filenames and other External Identifiers [AJN]"

]]></ac:plain-text-body></ac:structured-macro>

MITRE CWE

CWE-116, "Improper Encoding or Escaping of Output"

...

ISO/IEC 646-1991

ISO 7-bit coded character set for information interchange

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="99c965a9b2dd5a32-2a4d6b5c-4ab1439d-9b88b741-16af2aaa25b1b3abfdfc5435"><ac:plain-text-body><![CDATA[

[[Kuhn 2006

AA. Bibliography#Kuhn 06]]

UTF-8 and Unicode FAQ for UNIX/Linux

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="3070578475611aff-bdb180fc-474644af-8471ab0d-e007146486182357986d6506"><ac:plain-text-body><![CDATA[

[[Wheeler 2003

AA. Bibliography#Wheeler03]]

5.4 File Names

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="092aa29c7dcda037-0e3d2010-4023491f-b985b4e5-96861571c9dfa90d22bcb1a2"><ac:plain-text-body><![CDATA[

[[VU#439395

AA. Bibliography#VU439395]]

]]></ac:plain-text-body></ac:structured-macro>

...