Skip to content
Please enter a keyword to search

  • ISO/IEC TS 17961:2013

    Current The latest, up-to-date edition.

    Information technology — Programming languages, their environments and system software interfaces — C secure coding rules

    Available format(s):  Hardcopy, PDF, PDF 3 Users, PDF 5 Users, PDF 9 Users

    Language(s): 

    Published date:  15-11-2013

    Publisher:  International Organization for Standardization

    Add To Cart

    Abstract - (Show below) - (Hide below)

    ISO/IEC TS 17961:2013 specifies

    • rules for secure coding in the C programming language, and
    • code examples.

    ISO/IEC TS 17961:2013 does not specify

    • the mechanism by which these rules are enforced, or
    • any particular coding style to be enforced.

    Each rule in this Technical Specification is accompanied by code examples. Two distinct kinds of examples are provided:

    • noncompliant examples demonstrating language constructs that have weaknesses with potentially exploitable security implications; such examples are expected to elicit a diagnostic from a conforming analyzer for the affected language construct; and
    • compliant examples are expected not to elicit a diagnostic.

    General Product Information - (Show below) - (Hide below)

    Committee ISO/IEC JTC 1/SC 22
    Document Type Standard
    Publisher International Organization for Standardization
    Status Current

    Standards Referencing This Book - (Show below) - (Hide below)

    ISO/IEC 2382-1:1993 Information technology Vocabulary Part 1: Fundamental terms
    ISO/IEC 11889-1:2015 Information technology Trusted platform module library Part 1: Architecture
    ISO/IEC TR 24772:2013 Information technology Programming languages Guidance to avoiding vulnerabilities in programming languages through language selection and use
    ISO 80000-2:2009 Quantities and units Part 2: Mathematical signs and symbols to be used in the natural sciences and technology
    ISO/IEC 9899:2011 Information technology Programming languages C
    ISO/IEC/IEEE 9945:2009 Information technology — Portable Operating System Interface (POSIX®) Base Specifications, Issue 7
    ISO/IEC TR 24731-2:2010 Information technology Programming languages, their environments and system software interfaces Extensions to the C library Part 2: Dynamic Allocation Functions
    IEEE/Open Group 1003.1, 2013 Edition IEEE Standard for Information Technology—Portable Operating System Interface (POSIX(TM)) Base Specifications, Issue 7
    View more information

    • Access your standards online with a subscription

      Features

      • Simple online access to standards, technical information and regulations
      • Critical updates of standards and customisable alerts and notifications
      • Multi - user online standards collection: secure, flexibile and cost effective