Commit 0c829fdd authored by Valerie Aurora's avatar Valerie Aurora
Browse files

Tweak requirements based on in-meeting feedback

parent 68e9c186

EN-304-625.md

+7 −1
Original line number Diff line number Diff line
@@ -877,6 +877,8 @@ All warnings, annotations, or other method of suppressing warnings from the anal 
* Result: no warnings, and any suppressed warnings have documentation showing why they are safe

* Output: the source code, the output of the source code analysis checker, and the documentation for suppressed warnings



Guidance: Some compilers may meet this requirement with the correct compiler flags.



#### 5.2.X.x MI-FZ95 Runtime code coverage checking with memory access error detection



The product shall be checked for memory errors by running a tool that exercises the functions of the product in an environment while measuring code coverage and detecting memory access errors.
@@ -886,7 +888,7 @@ The product shall be checked for memory errors by running a tool that exercises 


#### 5.2.X.x MI-IMSL Implement in a memory-safe language



The manufacturer shall implement all security-relevant parts of the network interface firmware and/or software in a memory-safe language. The manufacturer shall document any use of unsafe memory features to explain why they are necessary and do not present a security risk.

The manufacturer shall implement the network interface firmware and/or software in a memory-safe language. The manufacturer shall document any use of unsafe memory features to explain why they are necessary and do not present a security risk.



TBD: define memory-safe language
@@ -894,6 +896,10 @@ TBD: define memory-safe language 
  * Result: source code is in a memory-safe language and the documentation of all uses of unsafe memory features convincingly demonstrates that each one of them does not present a security risk

  * Documentation: source code and documentation of use of unsafe features



#### 5.2.X.x MI-MERR Memory error mitigations



FIXME copy from OS



#### 5.2.X.x MI-ETIN Exhaustive testing of inputs



TBD describe this, basically smart fuzzing by hand :)