yesmar / sei-cert-ccs-samples Goto Github PK

Right now all of the samples are bare and don't contain any identifying information. Ostensibly, this is because I didn't want to make changes to the code as presented by SEI CERT. However, upon reflection, it makes sense to add a single line comment at the top of each sample with the form:

// PRE30-C: Noncompliant Code Example

The PRE30-C part indicates the rule the sample comes from. The part following the : is the unaltered text of the heading under which the code sample appears. This won't always be useful, e.g., when a rule has three or more Compliant Solution samples. However, many rules have samples with parenthetical descriptors that are useful, e.g., Noncompliant Code Example (Differing Storage Durations).

CON42-C is under construction on the SEI CERT wiki. Include it in the repo once the rule has been fleshed out and contains both non-compliant and compliant code samples.

The API collection is currently under construction on the SEI CERT wiki. Include it in the repo once the there are rules with code samples.

Exceptions (see DCL37-C, EXP33-C, EXP36-C, et al.) are not currently included. While the nature of the compliant and non-compliant code samples is clear, such is not the case for exceptions. Sometimes code is supplied, but other times only a description is given (read: some code needs to be implemented). Some exceptions are based on compliant code, while others are based on non-compliant code. Additional thought will have to be given on how to best represent exceptions.