@@ -116,7 +116,7 @@ Determine the appropriate static source code analysis tool and the manner of run
PASS if **any** of the following are fulfilled:
* The output of the source code analysis tool confirms the absence of the listed memory errors, or
* all warnings and suppressions have convincing documentation for how it is an acceptable risk.
*documentation is present, the method of running the tool is consistent with rationale, and all warnings or suppression of warnings have documented justification for why they are an acceptable risk.
