GitHub
CERT Secure Coding

Microsoft Windows (WIN)

Warning

This section is under construction.

This appendix contains guidelines for functions that are defined as part of the Microsoft Windows API [ MSDN ] and the Microsoft Visual C++ compiler [ MSDN ]. These rules and recommendations are not part of the core standard because they do not apply in all C language applications. The intent of providing these guidelines is to demonstrate how rules and recommendations for other standards or specific BB. Definitions#implementation may be integrated with the core C recommendations.

Information for Editors In order to have a new guideline automatically listed above be sure to label it win and recommendation .

Risk Assessment Summary

Rule Severity Likelihood Detectable Repairable Priority Level
WIN00-C High Unlikely Yes No P6 L2
WIN01-C High Likely Yes No P18 L1
WIN02-C High Likely Yes No P18 L1
WIN03-C High Unlikely No No P3 L3
WIN04-C High Unlikely No No P3 L3
Rec. 51. Microsoft Windows (WIN)
Rule 51. Microsoft Windows (WIN)
WIN00-C. Be specific when dynamically loading libraries
WIN01-C. Do not forcibly terminate execution
WIN02-C. Restrict privileges when spawning child processes
WIN03-C. Understand HANDLE inheritance
WIN04-C. Consider encrypting function pointers
WIN30-C. Properly pair allocation and deallocation functions