Miscellaneous (MSC)
- MSC30-C. Do not use the rand() function for generating pseudorandom numbers
- MSC32-C. Properly seed pseudorandom number generators
- MSC33-C. Do not pass invalid data to the asctime() function
- MSC37-C. Ensure that control never reaches the end of a non-void function
- MSC38-C. Do not treat a predefined identifier as an object if it might only be implemented as a macro
- MSC39-C. Do not call va_arg() on a va_list that has an indeterminate value
- MSC40-C. Do not violate constraints
- MSC41-C. Never hard code sensitive information
Information for Editors
To have a new guideline automatically listed above be sure to label it msc and rule .
Risk Assessment Summary
| Rule | Severity | Likelihood | Detectable | Repairable | Priority | Level |
|---|---|---|---|---|---|---|
| MSC30-C | Medium | Unlikely | Yes | No | P4 | L3 |
| MSC32-C | Medium | Likely | Yes | Yes | P18 | L1 |
| MSC33-C | High | Likely | No | No | P9 | L2 |
| MSC37-C | High | Unlikely | Yes | No | P6 | L2 |
| MSC38-C | Low | Unlikely | Yes | No | P2 | L3 |
| MSC39-C | Low | Unlikely | Yes | No | P2 | L3 |
| MSC40-C | Low | Unlikely | No | No | P1 | L3 |
| MSC41-C | High | Probable | No | No | P6 | L2 |
