ISO/IEC TS 17961:2013
Current
Current
The latest, up-to-date edition.
Information technology — Programming languages, their environments and system software interfaces — C secure coding rules
Amended by
Available format(s)
Hardcopy , PDF , PDF 3 Users , PDF 5 Users , PDF 9 Users
Published date
11-15-2013
Important note : All end users must be registered with an Account prior to user licenses being assigned.
ISO/IEC TS 17961:2013 specifies
- rules for secure coding in the C programming language, and
- code examples.
ISO/IEC TS 17961:2013 does not specify
- the mechanism by which these rules are enforced, or
- any particular coding style to be enforced.
Each rule in this Technical Specification is accompanied by code examples. Two distinct kinds of examples are provided:
- noncompliant examples demonstrating language constructs that have weaknesses with potentially exploitable security implications; such examples are expected to elicit a diagnostic from a conforming analyzer for the affected language construct; and
- compliant examples are expected not to elicit a diagnostic.
| Committee |
ISO/IEC JTC 1/SC 22
|
| DocumentType |
Standard
|
| Pages |
80
|
| PublisherName |
International Organization for Standardization
|
| Status |
Current
|
| Standards | Relationship |
| PD ISO/IEC TS 17961:2013 | Identical |
| NEN NPR ISO/IEC TS 17961 : 2013 C1 2016 | Identical |
| CAN/CSA-ISO/IEC TS 17961:18 | Identical |
| ISO/IEC 2382-1:1993 | Information technology Vocabulary Part 1: Fundamental terms |
| ISO/IEC 11889-1:2015 | Information technology — Trusted platform module library — Part 1: Architecture |
| ISO/IEC TR 24772:2013 | Information technology Programming languages Guidance to avoiding vulnerabilities in programming languages through language selection and use |
| ISO 80000-2:2009 | Quantities and units Part 2: Mathematical signs and symbols to be used in the natural sciences and technology |
| ISO/IEC 9899:2011 | Information technology Programming languages C |
| ISO/IEC/IEEE 9945:2009 | Information technology — Portable Operating System Interface (POSIX®) Base Specifications, Issue 7 |
| ISO/IEC TR 24731-2:2010 | Information technology Programming languages, their environments and system software interfaces Extensions to the C library Part 2: Dynamic Allocation Functions |
| IEEE/Open Group 1003.1, 2013 Edition | IEEE Standard for Information Technology—Portable Operating System Interface (POSIX(TM)) Base Specifications, Issue 7 |
Access your standards online with a subscription
Features
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.