Difference between revisions of "Cpp Coding Standards/SECURITY"

From Apache OpenOffice Wiki
Jump to: navigation, search
m
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
Topic-Id: '''SECURITY'''
+
== Security (SECURITY) ==
 +
''Some errors may be entry points for malicious software.''
  
Some errors may be entry points for malicious software.
+
===== No Unsafe Functions <span id="UnsafeFunc">(UnsafeFunc)</span> =====
----
+
Don't use functions that are known to have security issues (strcpy etc.) [[/UnsafeFunc|-> Details]]
=== Summary ===
+
==== No Unsafe Functions <span id="UnsafeFunc">(UnsafeFunc)</span> ====
+
Don't use functions that are known to have security issues (strcpy etc.)
+
  
[[/UnsafeFunc|Details]]
+
===== Validate Input <span id="ValInput">(ValInput)</span> =====
 +
Validate all input coming from external. [[/ValInput|-> Details]]
  
==== Validate Input <span id="ValInput">(ValInput)</span> ====
+
===== No Buffer Overflows <span id="BuffOver">(BuffOver)</span> =====
Validate all input coming from external.
+
Check range and validity of buffers. [[/BuffOver|-> Details]]
  
[[/ValInput|Details]]
+
===== No Integer Overflows <span id="IntOver">(IntOver)</span> =====
 
+
Be aware that integers have limited range. [[/IntOver|-> Details]]
==== No Buffer Overflows <span id="BuffOver">(BuffOver)</span> ====
+
Check range and validity of buffers.
+
 
+
[[/BuffOver|Details]]
+
 
+
==== No Integer Overflows <span id="IntOver">(IntOver)</span> ====
+
Be aware that integers have limited range.
+
 
+
[[/IntOver|Details]]
+
  
 
----
 
----
 
[[Category:Coding Standards]]
 
[[Category:Coding Standards]]

Latest revision as of 09:27, 23 May 2007

Security (SECURITY)

Some errors may be entry points for malicious software.

No Unsafe Functions (UnsafeFunc)

Don't use functions that are known to have security issues (strcpy etc.) -> Details

Validate Input (ValInput)

Validate all input coming from external. -> Details

No Buffer Overflows (BuffOver)

Check range and validity of buffers. -> Details

No Integer Overflows (IntOver)

Be aware that integers have limited range. -> Details


Personal tools