标准摘要
[中文适用范围]： 本技术规范规定了 — C 编程语言的安全编码规则和 — 代码示例。 本技术规范没有指定 - 执行这些规则的机制或 - 执行任何特定的编码风格。 （就适当的风格指南达成共识是不可能的。 程序员应该定义风格指南并一致地应用这些指南。 一致地应用编码风格的最简单方法是使用代码格式化工具。 许多交互式开发环境都提供这样的能力。 ） [外文原描述]： ISO/IEC TS 17961:2013 specifies rules for secure coding in the C programming language, and code examples. ISO/IEC TS 17961:2013 does not specify the mechanism by which these rules are enforced, or any particular coding style to be enforced. Each rule in this Technical Specification is accompanied by code examples. Two distinct kinds of examples are provided: noncompliant examples demonstrating language constructs that have weaknesses with potentially exploitable security implications; such examples are expected to elicit a diagnostic from a conforming analyzer for the affected language construct; and compliant examples are expected not to elicit a diagnostic.
英文名称Information technology - Programming languages, their environments and system software interfaces - C secure coding rules