Agenda: Meeting #44 on Programming Language Vulnerabilities, April 15-16 2016

Document ISO/IEC/JTC 1/SC 22/WG 23 N0718

Minutes of Meeting pre-meeting 50
ISO/IEC JTC 1/SC 22/WG23
17 July 2017, 2000-2200 UTC

Meeting Location :

WebEx

Meeting Times:

17 July 2017 2000-2200 UTC

Attendees

Larry Wagoner USA, C

Joyce Tokar USA, Ada

Tullio Vardenaga Italy, Ada

Clive Pygott UK, C, C++

Stephen Michell, Convenor, Canada

Ulrich Neumerkel, Austria

Hubert Tong Canada, C++

Local Contacts:

IMPORTANT:

Agenda

1 Opening activities

1.1 Opening Comments

1.2 Introduction of Participants/Roll Call

1.3 Procedures for this Meeting

1.4 Approval of previous Minutes

N/A

1.5 Review of actions items and resolutions, Action Item and Decision Logs

1.6 Approval of Agenda [N 0711]

Approved

1.7 Future Meeting Schedule


2018

Pre-mtg 57	01/11/18	Webex, 2 hours
#56	12-14/09/18	Toronto, Ontario, Canada
#55	15-16/06/18	Lisbon, Portugal with WG 9 and Ada Europe
Pre-mtg-53	mid May 2018	Webex, 2 hours
#54	TBD April 2018	Brno, Chez Republic (with WG 14)
Pre-mtg 53	TBD March 2018	Webex , 2 hours
#52	22-23 January 2018	Phoenix, AZ	Alternative could be a 2-day electronic meeting

2017
pre-mtg-52	20/11/17	Teleconference (UTC 2000, 2 hr)
#51	6-8 Nov 2017	Alburqueque Marriot with C++	This meeting was added at invitation of WG 21/SG 12
pre-mtg-51	16/10/17	Teleconference (UTC 2000, 2 hr)
#50	16-17 August 2017	BSI London (with SC 22 Plenary)

2. Liaison Activities

Are there any liaisons that should be terminated?

2.1 PL22.3/WG5 (Fortran)

Dan Nagle

2.2 WG4 (COBOL)

2.3 WG9 (Ada)

Erhard

2.4 PL22.11/WG14 C

2.5 PL22.16/WG21 (C++)

Stephen Michell

2.6 Ecma International, TC49/TG2 (C#), TC39 (ECMAScript)

2.10 MISRA C

Clive

2.11 MISRA (C++)

Clive

2.12 SPARK

Joyce Tokar

2.14 SC27/WG3, WG4 Security

Stephen Michell

2.15 Other Liaison Activities or National body reports

3. Document Review

3.1 TR 24772-1 Vulnerabilities, language independent

In 6.41 Inheritance, we may have missed a mitigation on how to avoid accidental overloadings (when we meant to override). After review, we are comfortable that the issue has been addressed.

3.2 TR 24772-2 Ada language specific part

References to Ada programming guidance. These documents reflect the update of Ada Quality Style and Guide.

https://en.wikibooks.org/wiki/Ada_Programming

https://en.wikibooks.org/wiki/Ada_Style_Guide

3.3 TR 24772-3 C language specific part

Latest version of TR 24772-3 C

3.4 TR 24772-4 Python language specific part

3.5 TR 24772-8 Fortran

Document N0703.

3.6 TR 24772-10 C++

AI 50-01 – Erhard, Stephen and Clive – Work on language to connect C subset in each sections

Reference to the CPP core guidelines: https://isocpp.github.io/CppCoreGuidelines/CppCoreGuidelines

3.7 Bibliography for each TR24772 Part

3.8 Dirty Dozen Rules for C, generic, and other languages

4 Strategy (Face to face meetings only)

5 Publicity (Face to face meetings only)

6 Other Business

6.1 Review of Assignment of responsibilities

We update the list of editors for the active documents.

7. Resolutions and Action Items