GitHub
CERT Secure Coding

TODO List

Tags (Labels)

TagMeaning
sectionPages that form the main sections of this standard and that are listed in the Section Index on the SEI CERT C Coding Standard page.
links-to-voidGuidelines with links to a rule in 6 The Void . The link should be removed.
update-checkerGuidelines that have been significantly changed since the checker was coded. The checker needs updating.
incompletePages that need work.
deletemePages that need to be deleted. See also void below.
citations-incompletePages that have problems with the citations at the bottom.
sidebarPages with comments that might make good sidebars.
exportable-cGuidelines in other CERT secure coding standards (residing in other Wiki spaces) that might make good C guidelines. Port to C those rules that are truly applicable.
exportable-javaGuidelines that might be candidates for adoption in the SEI CERT Oracle Coding Standard for Java .
voidPages tagged for elimination from the standard and that are listed in 6 The Void .

ROSE-Specific Tags (Labels)

Pages now have tags (also known as

Labels

) to indicate the status of their corresponding checker in Compass Rose:

TagMeaning
rose-completeROSE catches all violations
rose-partialROSE catches some violations
rose-possibleROSE could catch some or all violations, but doesn't yet.
rose-gccROSE doesn't catch violations, but will soon, GCC catches violations
unenforceableThese rules can't be checked automatically.
rose-nonapplicableThese rules could be checked automatically in theory, but not by ROSE.
rose-na-macrosROSE could check these rules if it recognized macro usage.
rose-na-multiple-filesROSE could check these rules if it operated on multiple files at once.
rose-false-positiveROSE could enforce this rule, but could not avoid catching some false positives.

At this point, all rules should have one of these tags. That is, they should be completely or partially checked by ROSE, or they should be marked 'rose-possible', in that we will try to check them with ROSE, or they should have one of the nonapplicable tags indicating we don't think they can be checked with ROSE.


It might also be worth giving these another look.