SEI CERT C Coding Standard

14.11 CON40-C. Do not refer to an atomic variable twice in an expression 447
14.12 CON41-C. Wrap functions that can fail spuriously in a loop 451
15 Miscellaneous (MSC) 455
15.1 MSC30-C. Do not use the rand() function for generating pseudorandom numbers 455
15.2 MSC32-C. Properly seed pseudorandom number generators 459
15.3 MSC33-C. Do not pass invalid data to the asctime() function 463
15.4 MSC37-C. Ensure that control never reaches the end of a non-void function 466
15.5 MSC38-C. Do not treat a predefined identifier as an object if it might only
be implemented as a macro 470
15.6 MSC39-C. Do not call va_arg() on a va_list that has an indeterminate value 473
15.7 MSC40-C. Do not violate constraints 476
Appendix A: Bibliography 481
Appendix B: Definitions 501
Appendix C: Undefined Behavior 510
Appendix D: Unspecified Behavior 525
SEI CERT C Coding Standard: Rules for Developing Safe, Reliable, and Secure Systems
Software Engineering Institute | Carnegie Mellon University
[DISTRIBUTION STATEMENT A] Approved for public release and unlimited distribution.
iv