Verified Commit be5fe228 authored by Aki Braun's avatar Aki Braun
Browse files

Broadens "common memory errors"

parent 6c60ba98
Loading
Loading
Loading
Loading
+3 −1
Original line number Diff line number Diff line
@@ -77,7 +77,7 @@ In addition to memory safety, compiled software is a potential target based on p
1. **REQ-SSD-02 (MI-SSCA)-1** All cybersecurity-relevant parts of the product shall be checked for known code patterns that produce _common memory errors_, and
2. **REQ-SSD-02 (MI-SSCA)-2** any identified memory errors or suppression of warnings shall be documented with a rationale for why it does not constitute an unacceptable risk.

> NOTE: Examples of _common memory errors_ include:
> NOTE: Examples of _common memory errors_ include, but may not be limited to:
>
> * buffer overflow
> * out-of-bounds
@@ -85,6 +85,8 @@ In addition to memory safety, compiled software is a potential target based on p
> * double free
> * use of uninitialized variables
> * dereference of invalid pointer
> * race conditions
> * integer overflow

#### 5.2.2.2 Applicability