Document ISO/IEC/JTC 1/SC 22/WG 23 N1042

Draft Minutes Meeting #72
ISO/IEC JTC 1/SC 22/WG2

22 February 2021 1900-2200 UTC

Meeting Location : Zoom

Agenda

72.1 Opening activities

72.1.1 Opening Comments

72.1.2 Introduction of Participants/Roll Call

Stephen Michell – convenor

David Keaton

Erhard Ploedereder
Tullio Vardanega

Clive Pygott

72.1.3 Procedures for this Meeting

72.1.4 Approval of previous Minutes of meeting 71 (N1009) held 9 Nov 2020

72.1.5 Review of actions items and resolutions, Action Item and Decision Logs (N/A)

72.1.6 Approval of Agenda

72.1.7 Meetings Schedule

Past Meetings:

72.2 Liaison Activities (for in-person meetings only)

71.2.1 PL22.3/WG5 (Fortran)

71.2.2 WG4 (COBOL)

71.2.3 WG9 (Ada) Erhard Ploedereder

71.2.4 PL22.11/WG14 C Clive Pygott

71.2.5 PL22.16/WG21 (C++) Michael Wong
71.2.6 MISRA C Clive Pygott
Next version close to publication. Expect it to address ISO/IEC 9899:2011.

71.2.7 MISRA (C++) Clive Pygott

71.2.8 SPARK Erhard Ploedereder

71.2.9 Other Liaison Activities or National body reports

72.3. Report from SC 22 (Convenor)

Discussion of free availability, and information from the SC 22 program manager regarding documents rejected from being freely available:

The documents rejected for free availability were from SC 38. They were the ISO/IEC 19944 series, cloud computing reference architectures. Both the previous edition and the new edition are ISes; they were not rewritten from TRs to ISes. The new editions should have met the criteria just like the old editions, but ISO decided they did not.

We agree to send the SC 22 committee manager an almost-complete Part 1 and Part 2 (and possibly Part 3) so that he can work with ISO on the free availability issue.

72. 4 Document Review

Progress of 24772-11 and 24772-4 Python,

Both documents are being championed by the US government.

We are having discussions with Don Deutsch of Oracle and the Java Community Process to help us review Part 11. The convenor has a meeting scheduled Tuesday Feb 23 for these discussions. The Python community has been working with WG 23 since 2018 in reviewing material and providing technical expertise.

24772-10 C++ is making progress. It is challenging to get attention from WG 21 during this COVID time as they seem to have ¾ of every week blocked for WG 21 meetings. Nevertheless we meet every 4 weeks using Zoom and GitHub and are making progress.

24772-6 SPARK. AdaCore and the UK have agreed to lead the rewrite of the SPARK document. The SPARK language has changed significantly from the 2006 version that was the basis of TR 24772 Annex G. We have had 3 very productive meetings and see reaching closure on the document within two months.

Review of Draft IS 24772-1 (N1041 and draft ISO form 4 (NWIP) N1021.

In particular the restructure of TR 24772-1 to IS 24772-1, making clause 4 “Purpose of this document” and moving the general discussion of vulnerabilities and the “top 10” guidance to clause 5.

Clause 4.2 “Applying this document” - We need to make it clear that this document is providing guidance, and is not specifying how software should be developed. Should we use the term “conformance” here?

Other clauses as needed.

Annex C Language specific template - needed significant rework to cover the changes to clause 4 and clause 5.

The convenor believes that the NWIP is sufficient.

72.6 Review of Assignment of responsibilities

Erhard to rework Annex C to match the new document structure, and considering WD 24772-2 Ada.

Stephen to prepare documents to send to the SC 22 committee manager to approach ISO about free availability.

Stephen to send the Part 2 Ada to WG 9 by Feb 25 for discussion March 19.

72.7 Resolutions and Action Items

72.8. Adjournment