...
ISO/IEC 9899:201x Committee Draft October 4, 2010 N1516 Section 6.8.5, Iteration statements.
...
MSC39SER03-C. Do not call va_arg() on a va_list that has indeterminate value 49. Miscellaneous (MSC) 50. POSIX (POS)J. Prevent serialization of unencrypted, sensitive data 16. Serialization (SER) SER05-J. Do not allow serialization and deserialization to bypass the Security Manager