Agenda: Meeting #44 on Programming Language Vulnerabilities, April 15-16 2016

Document ISO/IEC/JTC 1/SC 22/WG 23 N0668

Draft Agenda Pre-Meeting #46
ISO/IEC JTC 1/SC 22/WG 23: Programming Language Vulnerabilities
15 August 2016

Meeting Location :

Teleconference

SC 22/WG 23 pre-meeting 46 electronic meeting

Monday, August 15, 2016

4:00 pm Eastern Daylight Time (New York, GMT-04:00)

Duration: 2 hrs

Meeting number (access code): 952 308 902

Meeting password: wg23 Add to Calendar

When it's time, join the meeting.

Join by phone

0800-051-3810 Call-in toll-free number (UK)

+44-203-478-5289 Call-in toll number (UK)

Global call-in numbers

Toll-free calling restrictions

Can't join the meeting?

IMPORTANT NOTICE: Please note that this WebEx service allows audio and other information sent during the session to be recorded, which may be discoverable in a legal matter. By joining this session, you automatically consent to such recordings. If you do not consent to being recorded, discuss your concerns with the host or do not join the session.

Meeting Times:

15-16 September 2016: 0900-1700 Central European daylight time (0700-1500 UTC)

Local Arrangements:

N/A

Local Contacts:

N/A

IMPORTANT:

Agenda

1 Opening activities

1.1 Opening Comments

1.2 Introduction of Participants/Roll Call

1.3 Procedures for this Meeting

Minutes for this electronic meeting will become part of the meeting 46 agenda.

1.4 Approval of previous Minutes

N/A for electronic meetings

1.5 Review of actions items and resolutions, Action Item and Decision Logs

1.6 Approval of Agenda [N 0668]

1.7 Future Meeting Schedule


2017
pre-mtg-51	20/11/17	Teleconference (UTC 2000, 2 hr)
post-mtg-50	16/10/17	Teleconference (UTC 2000, 2 hr)
#50	17-18 August 2017	BSI London (with SC 22 Plenary)
#49	12-13 June 2017	Vienna, Austria with Ada Europe(2 day)
post-mtg-48	15/05/17	Teleconference (UTC 2000, 2 hr)
#48	6-7 April 2017	IBM Markham, Canada (2 day)
pre-mtg-48	06/03/17	Teleconference (UTC 2100, 2 hr)
#47	23-24 January 2017	In-person (2 day)

2016
pre-mtg-47	21/11/16	Teleconference (UTC 2000, 2 hr)	oo
post-mtg-46	11/10/16	Teleconference (UTC 2000, 2 hr)
#46	15-16 Sep 2016	Vienna, Austria (with SC 22 Plenary)

2. Liaison Activities

N/A for electronic meeting except by request.

2.1 SC 22

2.2 PL 22 (Open)

2.3 PL22.3/WG5 (Fortran)

2.4 WG4 (COBOL)

2.5 WG9 (Ada)

2.6 PL22.11/WG14 (C)

2.7 PL22.16/WG21 (C++)

2.8 Ecma International, TC49/TG2 (C#)

2.9 Ecma International, TC39 (ECMAScript)

2.10 MISRA (C)

2.11 MISRA (C++)

2.12 SPARK

2.13 SC7/WG19 (UML)

2.14 SC27/WG3, WG4 Security

2.15 Other Liaison Activities or National body reports

3. Document Review

3.1 TR 24772-1 Vulnerabilities, language independent

Document N664,

3.2 TR 24772-2 Ada language specific part

Waiting for a proposal from SC 22/WG 9

3.3 TR 24772-3 C language specific part

Document N0665

3.4 TR 24772-4 Python language specific part

Document N0592.

3.5 TR 24772-8 Fortran

Document [N0560] needs review.

3.6 TR 24772-X C++

Consider document [N0582]

3.7 Bibliography for each TR24772 Part

3.8 Dirty Dozen Rules for C, generic, and other languages

Strategy on how to use and incorporate such rules.