This document represents a preliminary draft of the CERT C Programming Language Secure Coding
Standard. This project was initiated following the 2006 Berlin meeting of WG14 to produce a secure
coding standard based on the C99 standard. Although this is an incomplete work, we would greatly
appreciate your comments and feedback at this time to further the development and refinement of the
material. Please provide comments that are commensurate with the existing detail in the document. For
example, if a rule or recommendation is simply a stub you may wish to comment if you think having a
rule or recommendation in that area is unwarranted.
This work is sponsored by the U.S. Department of Defense.
The Software Engineering Institute is a federally funded research and development center sponsored by
the U.S. Department of Defense.
Copyright 2007 Carnegie Mellon University.
