Questions tagged [standards-compliance]
The standards-compliance tag has no usage guidance.
396
questions
-1
votes
0
answers
16
views
JAR FIPS validator [closed]
Is there any tools available to validate whether a given jar file is FIPS-compliant or not?
I have found this tool National Institute of Standards and Technology (NIST) FIPS Compliance Checker but I ...
0
votes
0
answers
28
views
Which option of compliance information fits my application, and if needed any compliance documents, what are the documents?
I developed Flutter applications, that implement AES-256 encryption algorithm using the encrypt package (https://pub.dev/packages/encrypt), and also that implement the PBKDF2 hash algorithm, using the ...
0
votes
2
answers
28
views
Newlines in HTTP
The HTTP 1.1 standard says that newlines are CRLF. However wget, lynx, and firefox, all accepts a response in UNIX format.
Is it acceptable for a HTTP parser to simply skip all carriage returns in the ...
4
votes
2
answers
100
views
Is it possible to write a strictly conforming C program that outputs to the display?
According to ISO/IEC 9899:2017:
A strictly conforming program shall use only those features of the language and library specified in this document. It shall not produce output dependent on any ...
0
votes
0
answers
7
views
Most compliant Session duration on Mobile app and Website (best practice)
I would like to set a session duration for Mobile app and Website
Some Pentest from Big4 recommended:
30 min inactivity logout (will this be even possible?)
30 days active session
not allow multiple ...
1
vote
1
answer
122
views
Azure Policy DeployIfNotExists fails to change values
I'm currently creating an Azure Policy that (is supposed to) deploys Microsoft Defender for Servers with Plan P1 if the current plan is different. Many subscriptions that I have currently have ...
0
votes
0
answers
136
views
For NSCoding, which "Export Compliance Information" option I should select?
Upload new version of app on App store or for TestFlight. Will need to add "Missing Compliance" warning details.
My app uses NSCoding, Which option I need to select from Apple "Export ...
0
votes
0
answers
38
views
Samples html pages which are compliant with PDF/A-1a, PDF/A-1b, PDF/A-2a, PDF/A-2b, PDF/A-2u, PDF/A-3 conformance levels
I wanted to generate pdf which are compliant with certain conformance levels from cfhtmltopdf tag but I am not getting input/resource to generate pdf
Where can I get the example/sample html webpages ...
0
votes
0
answers
46
views
PDF Accessibility | Title - Failed Error in Adobe Acrobat Pro using Apache FOP in Java
I'm working on Apache FOP to generate a PDF. As part of the compliance, I've enabled accessibility to true on FOUserAgent. Here's my below code snippet.
FopFactory fopFactory = FopFactory.newInstance(...
1
vote
0
answers
193
views
Which encryption algorithms does AWS Amplify use for iOs apps?
I am publishing my mobile app to the app store, it asks what type of encryption algorithm does my application uses and the options are:
Encryption algorithms that are proprietary or not accepted as ...
4
votes
0
answers
78
views
c16rtomb()/c32rtomb() locale-independent conversion?
C++11 introduced the c16rtomb()/c32rtomb() conversion functions, along with the inverse (mbrtoc16()/mbrtoc32()). c16rtomb() clearly states in the reference documentation here:
The multibyte encoding ...
0
votes
0
answers
117
views
Where to get free benchmarks for CIS CAT Lite in xml format?
i am planning to use CIS CAT Lite (free version) for auditing several RHEL servers. However, Lite version contains only few benchmarks and none of them is for RHEL. My problem is, i can not purchase ...
0
votes
0
answers
120
views
AdMob in iOS app - Collected user data deletion
New to AdMob and trying to understand compliance as it relates to providing and deleting collected user data to a user upon request from purely programming standpoint.
In my research, it appears that ...
0
votes
0
answers
229
views
Firebase - GDPR+Schrems requires end-to-end encryption, but how?
I need to protect a group of user’s data, i.e. to facilitate multiple invited users to read and contribute protected data.
My understanding is that I need to implement the following design:
1 . Each ...
0
votes
0
answers
58
views
Conditional Access "What If" on Microsoft Intune shows policy won't apply due to "Device Platform" even though device platform matches the policy
We're working to set up a Conditional Access policy that blocks iOS and Android devices from connecting to cloud apps if they are marked noncompliant.
Compliance policy is already in place for the ...
0
votes
1
answer
164
views
What guarantees does C provide about enum ordinal values
When I convert enum to integer type, what can I expect?
Does the first variant have value of 0?
Does the variant ordinal number increment by 1?
Assume that I did not explicitly provide the values.
...
5
votes
2
answers
2k
views
Can we use Firebase Authentication and be GDPR compliant?
The Firebase Authentication is processing data exclusively in the United States, and is therefore not GDPR compliant. However, they are saying on the same site that:
Firebase has moved to reliance on ...
-1
votes
1
answer
41
views
how can I execute a string formatting with out using exec function in python
I have an exec statement to set the formatting of two variables in python 3.6. Even though the code works fine, I need to change this due to compliance issue. Please let me know how it can be done ...
3
votes
1
answer
73
views
GCP suspension preventing access to our data
We have a Google Cloud Virtual Machine type N1 with 8 vCPU.
The VM is used for restoring DB and extensive manipulation of the data.
Google compliance team suspended the VM thinking we are involved in ...
1
vote
0
answers
74
views
MSVC: run time vs. compile time: 1.000000 vs. -nan(ind)
Sample code:
#include <math.h>
#include <stdio.h>
typedef double T;
T min(T a, T b)
{
return a < b ? a : b;
}
#define MIN(a,b) ((a) < (b) ? (a) : (b))
#define ONE ...
-4
votes
1
answer
108
views
Why isn't an IEC 60559 conformant implementation required to define __STDC_IEC_559__ (to 1)?
The C (C99+) standard requires (though implicitly) a conforming implementation to define __STDC__ to 1.
However, the C standard does not require an IEC 60559 conformant implementation to define ...
1
vote
2
answers
140
views
Why don't non-strict floating-point models change the value 1 of __STDC_IEC_559__?
Sample code (t0.c):
#include <stdio.h> // fix for clang, see https://stackoverflow.com/q/69976945/1778275
#if __STDC_IEC_559__ == 1
#pragma message "__STDC_IEC_559__ is 1"
#else
#...
1
vote
0
answers
75
views
C standard library: standard headers: is reserving of non-standard identifiers, which don't begin with underscore, considered acceptable practice?
I was just reading C11, 7.1.3 Reserved identifiers, 2, which says:
No other identifiers are reserved.
Here is a quick test:
# gcc on Linux
$ echo -e "#include <time.h>\n#define CLK_TCK&...
1
vote
0
answers
247
views
Cannot use -fsanitize=address in g++-11
I tryed to use -fsanitize=address option in g++-11. However, ld showed an error message when I executed command.
Environment:
OS: macOS Monterery Version 12.1 Beta (21C5021h)
Arch: arm64
g++-11:
❯ g+...
8
votes
3
answers
307
views
What are the examples of non-ISO practices, which are not found by -pedantic?
https://gcc.gnu.org/onlinedocs/gcc/Warning-Options.html :
Some users try to use -Wpedantic to check programs for strict ISO C conformance. They soon find that it does not do quite what they want: it ...
1
vote
4
answers
134
views
What is the rationale for "semantics violation does not require diagnostics"?
Follow-up question for: If "shall / shall not" requirement is violated, then does it matter in which section (e.g. Semantics, Constraints) such requirement is located?.
ISO/IEC 9899:202x (E) ...
2
votes
2
answers
134
views
If "shall / shall not" requirement is violated, then does it matter in which section (e.g. Semantics, Constraints) such requirement is located?
If "shall / shall not" requirement is violated, then does it matter in which section (e.g. semantics, constraints) such requirement is located?
Reason of the question: this opinion:
This is ...
2
votes
1
answer
348
views
Tentative definition of variable with internal linkage has incomplete non-array type: conforming implementations show different behavior
Follow-up question for: Why do conforming implementations behave differently w.r.t. incomplete array types with internal linkage?.
Context: tentative definition of variable with internal linkage has ...
4
votes
2
answers
1k
views
Microsoft C/C++: what is the definition of "strict conformance" w.r.t. implementation?
Context:
/Za, /Ze (Disable Language Extensions):
... the C compiler conforms strictly to the C89/C90 standard
/permissive- (Standards conformance):
... and sets the /Zc compiler options for strict ...
1
vote
0
answers
63
views
AWS Artifact & AWS Organizations
I want to download a SOC 2 TYPE 2 report from AWS artifact. In my company we use AWS Organizations to manage 20 different AWS accounts. I was wondering if it would be possible to download a single SOC ...
0
votes
0
answers
1k
views
Suppress or delete findings & violations (security hub/config) for default created resources by control tower?
I deployed control tower in the ca-central-1 region and enabled security hub and aws config through a dedicated admin account (audit account provided by default via control tower).
I then enabled the ...
1
vote
1
answer
558
views
How to fix s3-bucket-policy-grantee-check non-compliance?
I deployed a NIST CSF conformance pack on my AWS account, via AWS Config, to improve my security posture. One of my resources was non-compliant due to the s3-bucket-policy-grantee-check not passing. ...
4
votes
2
answers
91
views
Can extension cancel the existing standard requirements?
Follow-up question for Why do conforming implementations behave differently w.r.t. incomplete array types with internal linkage?.
Context: in both gcc and clang (conforming implementations) by default ...
-1
votes
1
answer
106
views
Why C compiler validation suites themselves may use the C standard library if the C standard library is actually under test?
How it is possible for C compiler validation suites to use any feature of the C standard library if the C standard library is actually under test and may be buggy (which invalidates the validation ...
1
vote
1
answer
186
views
Autosar standard-compilant way to use regex
I need to parse URI-like string. This URI is specific to the project and corresponds to "scheme://path/to/file", where path should be a syntactically correct path to file from filesystem ...
5
votes
1
answer
165
views
Why do conforming implementations behave differently w.r.t. incomplete array types with internal linkage?
Sample code (t0.c):
static int arr[ ];
int main( void )
{
return arr[ 0 ];
}
static int arr[ ] = { 0 };
Invocations:
$ gcc t0.c -std=c11 -Wall -Wextra
<nothing>
$ clang t0.c -std=c11 ...
-3
votes
1
answer
82
views
If an implementation supports extra nonstandard features, then is such implementation conforming?
Follow-up question for: Do unsupported standard features affect conformance?.
Question: if an implementation supports extra features which are not described in the C standard, nor in any "...
0
votes
1
answer
95
views
Do unsupported standard features affect conformance?
Context: C compilers deliberately do not support some features while being conforming implementations. Is it ok?
Some examples. All of the compilers down below are conforming implementations (__STDC__ ...
4
votes
0
answers
108
views
Annex F conforming Intel targeted clang / gcc does not raise "invalid" floating-point exception for (signed char)128.0f, bug?
Annex F requires raising of "invalid" floating-point exception (C11, Annex F, F.4 Floating to integer conversion):
... if the floating value is infinite or NaN or if the integral part of ...
2
votes
1
answer
50
views
Are HAS_SUBNORM and __STDC_IEC_559__ dependent?
Are HAS_SUBNORM and __STDC_IEC_559__ dependent? For example:
If __STDC_IEC_559__ is 1, then HAS_SUBNORM is 1.
If HAS_SUBNORM is 0, then __STDC_IEC_559__ is not 1.
0
votes
1
answer
124
views
Is there any C compiler able to detect the violation of a "strictly conforming program"? [duplicate]
Is there any C compiler able to detect* the violation of a "strictly conforming program"?
* under some option, for example, --accept-only-strictly-conforming-program
If no, then which tools ...
0
votes
1
answer
21
views
Accesibility Compliance Error on keyboard access
I'm trying to solve all the issues related to the 508 complianca and I'm struggling with on of them.
Verify the <div> element with "menu" role has keyboard access
How can I add ...
1
vote
1
answer
97
views
Why in Java pow(1, qNaN) is qNaN while in IEEE 754-2008 pow(1, qNaN) is 1?
Why in Java pow(1, qNaN) is qNaN while in IEEE 754 pow(1, qNaN) is 1?
Java:
System.out.println(Math.pow(1, Double.NaN)); // prints NaN (which is qNaN)
$ javac --version
javac 11.0.11
IEEE 754-2008, ...
1
vote
0
answers
259
views
How no support of #pragma STDC FENV_ACCESS ON affects __STDC_IEC_559__ and __STDC__?
This simple code (t217.c):
#include <stdio.h>
#include <fenv.h>
#include <float.h>
#pragma STDC FENV_ACCESS ON
int main( void )
{
feclearexcept( FE_ALL_EXCEPT );
( void )( ...
-1
votes
2
answers
165
views
Shall a #pragma leading to nonstandard behavior cause __STDC__ macro not to be defined to 1?
Simple question: shall a #pragma leading to nonstandard behavior cause __STDC__ macro not to be defined to 1? (Does the C standard explicitly prescribes that? If yes, then in which section? If no, ...
-2
votes
1
answer
70
views
HTML 5 Validation Service
I am trying to check HTML 5 files for validity and have found the W3C validator.
However I have found that this validator accepts grossly wrong HTML documents like this one:
<!DOCTYPE html>
<...
1
vote
1
answer
171
views
Why Clang running on Windows has no C conformance (__STDC__ is not defined to 1)?
Sample code (t127.c):
#include <stdio.h>
int main(void)
{
int ret;
#if __STDC__ == 1
printf("Has C conformance to version ");
#if __STDC_VERSION__
printf("%ld", ...
2
votes
1
answer
100
views
Why does this use of the detection idiom result in different compilation errors for Clang and GCC and none for MSVC
While playing around with the detection idiom and void_t I found that expressions where the subtraction operator and void* are involved lead to different errors in the tested compilers.
GCC 10.2 and ...
0
votes
1
answer
266
views
Is there any C compiler which defines both __STDC__ and __STDC_IEC_559__ to 1?
Is there any C compiler(s) which defines both __STDC__ and __STDC_IEC_559__ to 1?
If so, then which one(s)?
Reason of the question: as far as I can test (April 2021), none of the latest versions of ...
3
votes
1
answer
105
views
Why is this combination of move and value constructor ambigous for MSVC but not for Clang and GCC in C++17 and above
I have the following code
struct R {
int i_ = 8;
R() = default;
R(R const& o) = default;
R(R&& o) = default;
R(int i) : i_(i) {}
operator int() const { return i_; }
...