Skip to main content
assistive.skiplink.to.breadcrumbs
assistive.skiplink.to.header.menu
assistive.skiplink.to.action.menu
assistive.skiplink.to.quick.search
Log in
Confluence
Spaces
Hit enter to search
Help
Online Help
Keyboard Shortcuts
Feed Builder
What’s new
Available Gadgets
About Confluence
Log in
SEI CERT C Coding Standard
Pages
Boards
Space shortcuts
Dashboard
Secure Coding Home
Android
C
C++
Java
Perl
Page tree
Browse pages
Configure
Space tools
View Page
A
t
tachments (0)
Page History
Page Information
View in Hierarchy
View Source
Export to PDF
Export to Word
Pages
…
SEI CERT C Coding Standard
4 Back Matter
EE. Analyzers
Axivion Bauhaus Suite
Page Information
Title:
Axivion Bauhaus Suite
Author:
Aleksandr Karbyshev
Aug 08, 2018
Last Changed by:
David Svoboda
Oct 14, 2024
Tiny Link:
(useful for email)
https://wiki.sei.cmu.edu/confluence/x/MoB4Bw
Export As:
Word
·
PDF
Incoming Links
SEI CERT C Coding Standard (141)
Page:
MEM33-C. Allocate and copy structures containing a flexible array member dynamically
Page:
STR34-C. Cast characters to unsigned char before converting to larger integer sizes
Page:
POS37-C. Ensure that privilege relinquishment is successful
Page:
MEM30-C. Do not access freed memory
Page:
CON32-C. Prevent data races when accessing bit-fields from multiple threads
Page:
EXP35-C. Do not modify objects with temporary lifetime
Page:
PRE31-C. Avoid side effects in arguments to unsafe macros
Page:
CON40-C. Do not refer to an atomic variable twice in an expression
Page:
INT36-C. Converting a pointer to integer or integer to pointer
Page:
POS47-C. Do not use threads that can be canceled asynchronously
Page:
POS54-C. Detect and handle POSIX library errors
Page:
EXP05-C. Do not cast away a const qualification
Page:
FIO30-C. Exclude user input from format strings
Page:
EXP36-C. Do not cast pointers into more strictly aligned pointer types
Page:
DCL19-C. Minimize the scope of variables and functions
Page:
EXP46-C. Do not use a bitwise operator with a Boolean-like operand
Page:
PRE01-C. Use parentheses within macros around parameter names
Page:
ARR30-C. Do not form or use out-of-bounds pointers or array subscripts
Page:
DCL23-C. Guarantee that mutually visible identifiers are unique
Page:
DCL04-C. Do not declare more than one variable per declaration
Page:
EXP34-C. Do not dereference null pointers
Page:
MSC33-C. Do not pass invalid data to the asctime() function
Page:
STR38-C. Do not confuse narrow and wide character strings and functions
Page:
FIO47-C. Use valid format strings
Page:
PRE07-C. Avoid using repeated question marks
Page:
EXP20-C. Perform explicit tests to determine success, true and false, and equality
Page:
DCL30-C. Declare objects with appropriate storage durations
Page:
EXP14-C. Beware of integer promotion when performing bitwise operations on integer types smaller than int
Page:
DCL15-C. Declare file-scope objects or functions that do not need external linkage as static
Page:
EXP33-C. Do not read uninitialized memory
Page:
INT17-C. Define integer constants in an implementation-independent manner
Page:
PRE04-C. Do not reuse a standard header file name
Page:
ARR02-C. Explicitly specify array bounds, even if implicitly defined by an initializer
Page:
DCL16-C. Use "L," not "l," to indicate a long value
Page:
EXP02-C. Be aware of the short-circuit behavior of the logical AND and OR operators
Page:
DCL00-C. Const-qualify immutable objects
Page:
EXP19-C. Use braces for the body of an if, for, or while statement
Page:
ARR39-C. Do not add or subtract a scaled integer to a pointer
Page:
ERR32-C. Do not rely on indeterminate values of errno
Page:
EXP10-C. Do not depend on the order of evaluation of subexpressions or the order in which side effects take place
Page:
DCL02-C. Use visually distinct identifiers
Page:
EXP40-C. Do not modify constant objects
Page:
FLP02-C. Avoid using floating-point numbers when precise computation is needed
Page:
DCL13-C. Declare function parameters that are pointers to values not changed by the function as const
Page:
PRE02-C. Macro replacement lists should be parenthesized
Page:
PRE08-C. Guarantee that header file names are unique
Page:
EXP15-C. Do not place a semicolon on the same line as an if, for, or while statement
Page:
DCL12-C. Implement abstract data types using opaque types
Page:
FLP07-C. Cast the return value of a function that returns a floating-point type
Page:
MEM02-C. Immediately cast the result of a memory allocation function call into a pointer to the allocated type
Page:
PRE10-C. Wrap multistatement macros in a do-while loop
Page:
DCL18-C. Do not begin integer constants with 0 when specifying a decimal value
Page:
PRE32-C. Do not use preprocessor directives in invocations of function-like macros
Page:
STR30-C. Do not attempt to modify string literals
Page:
INT08-C. Verify that all integer values are in range
Page:
SIG35-C. Do not return from a computational exception signal handler
Page:
POS35-C. Avoid race conditions while checking for the existence of a symbolic link
Page:
SIG31-C. Do not access shared objects in signal handlers
Page:
STR10-C. Do not concatenate different type of string literals
Page:
DCL01-C. Do not reuse variable names in subscopes
Page:
PRE11-C. Do not conclude macro definitions with a semicolon
Page:
DCL07-C. Include the appropriate type information in function declarators
Page:
EXP44-C. Do not rely on side effects in operands to sizeof, _Alignof, or _Generic
Page:
INT13-C. Use bitwise operators only on unsigned operands
Page:
DCL03-C. Use a static assertion to test the value of a constant expression
Page:
POS39-C. Use the correct byte ordering when transferring data between systems
Page:
STR05-C. Use pointers to const when referring to string literals
Page:
MSC32-C. Properly seed pseudorandom number generators
Page:
PRE13-C. Use the Standard predefined macros to test for versions and features.
Page:
EXP32-C. Do not access a volatile object through a nonvolatile reference
Page:
FLP06-C. Convert integers to floating point for floating-point operations
Page:
STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator
Page:
DCL20-C. Explicitly specify void when a function accepts no arguments
Page:
PRE05-C. Understand macro replacement when concatenating tokens or performing stringification
Page:
SIG34-C. Do not call signal() from within interruptible signal handlers
Page:
ENV32-C. All exit handlers must return normally
Page:
INT34-C. Do not shift an expression by a negative number of bits or by greater than or equal to the number of bits that exist in the operand
Page:
DCL37-C. Do not declare or define a reserved identifier
Page:
EXP45-C. Do not perform assignments in selection statements
Page:
EXP07-C. Do not diminish the benefits of constants by assuming their values in expressions
Page:
PRE09-C. Do not replace secure functions with deprecated or obsolescent functions
Page:
DCL39-C. Avoid information leakage when passing a structure across a trust boundary
Page:
EXP42-C. Do not compare padding data
Page:
MSC37-C. Ensure that control never reaches the end of a non-void function
Page:
DCL40-C. Do not create incompatible declarations of the same function or object
Page:
MEM34-C. Only free memory allocated dynamically
Page:
STR07-C. Use the bounds-checking interfaces for string manipulation
Page:
STR11-C. Do not specify the bound of a character array initialized with a string literal
Page:
EXP12-C. Do not ignore values returned by functions
Page:
ARR37-C. Do not add or subtract an integer to a pointer to a non-array object
Page:
FLP30-C. Do not use floating-point variables as loop counters
Page:
ARR36-C. Do not subtract or compare two pointers that do not refer to the same array
Page:
PRE12-C. Do not define unsafe macros
Page:
ERR33-C. Detect and handle standard library errors
Page:
FIO38-C. Do not copy a FILE object
Page:
ARR01-C. Do not apply the sizeof operator to a pointer when taking the size of an array
Page:
EXP47-C. Do not call va_arg with an argument of the incorrect type
Page:
FIO37-C. Do not assume that fgets() or fgetws() returns a nonempty string when successful
Page:
PRE06-C. Enclose header files in an include guard
Page:
DCL41-C. Do not declare variables inside a switch statement before the first case label
Page:
INT09-C. Ensure enumeration constants map to unique values
Page:
MEM01-C. Store a new value in pointers immediately after free()
Page:
PRE30-C. Do not create a universal character name through concatenation
Page:
INT07-C. Use only explicitly signed or unsigned char type for numeric values
Page:
EXP00-C. Use parentheses for precedence of operation
Page:
DCL38-C. Use the correct syntax when declaring a flexible array member
Page:
STR32-C. Do not pass a non-null-terminated character sequence to a library function that expects a string
Page:
DCL31-C. Declare identifiers before using them
Page:
ERR34-C. Detect errors when converting a string to a number
Page:
MEM36-C. Do not modify the alignment of objects by calling realloc()
Page:
ENV30-C. Do not modify the object referenced by the return value of certain functions
Page:
POS34-C. Do not call putenv() with a pointer to an automatic variable as the argument
Page:
POS49-C. When data must be accessed by multiple threads, provide a mutex and guarantee no adjacent data is also accessed
Page:
STR37-C. Arguments to character-handling functions must be representable as an unsigned char
Page:
DCL06-C. Use meaningful symbolic constants to represent literal values
Page:
FLP37-C. Do not use object representations to compare floating-point values
Page:
POS36-C. Observe correct revocation order while relinquishing privileges
Page:
MEM31-C. Free dynamically allocated memory when no longer needed
Page:
DCL11-C. Understand the type issues associated with variadic functions
Page:
FIO34-C. Distinguish between characters read from a file and EOF or WEOF
Page:
INT15-C. Use intmax_t or uintmax_t for formatted IO on programmer-defined integer types
Page:
DCL09-C. Declare functions that return errno with a return type of errno_t
Page:
EXP37-C. Call functions with the correct number and type of arguments
Page:
ENV33-C. Do not call system()
Page:
SIG30-C. Call only asynchronous-safe functions within signal handlers
Page:
DCL05-C. Use typedefs of non-pointer types only
Page:
INT00-C. Understand the data model used by your implementation(s)
Page:
PRE00-C. Prefer inline or static functions to function-like macros
Page:
STR04-C. Use plain char for characters in the basic character set
Page:
MSC30-C. Do not use the rand() function for generating pseudorandom numbers
Page:
INT01-C. Use rsize_t or size_t for all integer values representing the size of an object
Page:
INT05-C. Do not use input functions to convert character data if they cannot handle all possible inputs
Page:
INT12-C. Do not make assumptions about the type of a plain int bit-field when used in an expression
Page:
ERR30-C. Take care when reading errno
Page:
DCL21-C. Understand the storage of compound literals
Page:
EXP30-C. Do not depend on the order of evaluation for side effects
Page:
DCL36-C. Do not declare an identifier with conflicting linkage classifications
Page:
POS30-C. Use the readlink() function properly
Page:
MSC24-C. Do not use deprecated or obsolescent functions
Page:
PRE03-C. Prefer typedefs to defines for encoding non-pointer types
Page:
STR09-C. Don't assume numeric values for expressions with type plain character
Hierarchy
Parent Page
Page:
EE. Analyzers
Labels
Global Labels (1)
analyzer
Recent Changes
Time
Editor
Oct 14, 2024 07:27
David Svoboda
View Changes
Feb 08, 2024 09:06
David Svoboda
View Changes
Sep 27, 2023 08:25
David Svoboda
View Changes
Jul 13, 2023 13:28
David Svoboda
View Changes
Jun 06, 2023 12:24
David Svoboda
View Page History
Outgoing Links
External Links (148)
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
SEI CERT C Coding Standard (1)
Page:
Axivion Bauhaus Suite_V
Overview
Content Tools
{"serverDuration": 193, "requestCorrelationId": "f2a776abad7941a2"}