Secure Coding Standard¶

The strongSwan project adheres to the following rules recommended by the CERT C Secure Coding Standard:

Preprocessor (PRE)¶

Full Adherence¶

• PRE03-C. Prefer typedefs to defines for encoding types

• PRE04-C. Do not reuse a standard header file name

• PRE06-C. Enclose header files in an inclusion guard

• "PRE09-C. Do not replace secure functions with deprecated or obsolescent functions":
  h3. Partial Adherence

• PRE00-C. Prefer inline or static functions to function-like macros

• PRE01-C. Use parentheses within macros around parameter names

• PRE02-C. Macro replacement lists should be parenthesized

Check Adherence¶

• PRE05-C. Understand macro replacement when concatenating tokens or performing stringification

• PRE07-C. Avoid using repeated question marks

No Adherence¶

• PRE08-C. Guarantee that header file names are unique

Declarations and Initialization (DCL)¶

Expressions (EXP)¶

Integers (INT)¶

Floating Point (FLP)¶

Arrays (ARR)¶

Characters and Strings (STR)¶

Memory Management (MEM)¶

Input Output (FIO)¶

Environment (ENV)¶

Signals (SIG)¶

Error Handling (ERR)¶

Application Programming Interfaces (API)¶

Concurrency (CON)¶

Miscellaneous (MSC)¶

POSIX (POS)¶