Difference between revisions of "Cpp Coding Standards/SECURITY"

From Apache OpenOffice Wiki
Jump to: navigation, search
 
m
 
(5 intermediate revisions by the same user not shown)
Line 1: Line 1:
== Security ==
+
== Security (SECURITY) ==
Some errors may be entry points for malicious software.
+
''Some errors may be entry points for malicious software.''
----
+
=== Rules ===
+
  
==== NoUnsafeFunctions ====
+
===== No Unsafe Functions <span id="UnsafeFunc">(UnsafeFunc)</span> =====
Don't use functions that are known to have security issues (strcpy etc.)
+
Don't use functions that are known to have security issues (strcpy etc.) [[/UnsafeFunc|-> Details]]
  
==== ValidateInput ====
+
===== Validate Input <span id="ValInput">(ValInput)</span> =====
Validate all input coming from external.
+
Validate all input coming from external. [[/ValInput|-> Details]]
  
==== NoBufferOverflow ====
+
===== No Buffer Overflows <span id="BuffOver">(BuffOver)</span> =====
Check range and validity of buffers.
+
Check range and validity of buffers. [[/BuffOver|-> Details]]
  
==== NoIntegerOverflow ====
+
===== No Integer Overflows <span id="IntOver">(IntOver)</span> =====
Be aware that integers have limited range.
+
Be aware that integers have limited range. [[/IntOver|-> Details]]
  
 
----
 
----
 
[[Category:Coding Standards]]
 
[[Category:Coding Standards]]

Latest revision as of 09:27, 23 May 2007

Security (SECURITY)

Some errors may be entry points for malicious software.

No Unsafe Functions (UnsafeFunc)

Don't use functions that are known to have security issues (strcpy etc.) -> Details

Validate Input (ValInput)

Validate all input coming from external. -> Details

No Buffer Overflows (BuffOver)

Check range and validity of buffers. -> Details

No Integer Overflows (IntOver)

Be aware that integers have limited range. -> Details


Personal tools