As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [standards-compliance]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
16 views

JAR FIPS validator [closed]

Is there any tools available to validate whether a given jar file is FIPS-compliant or not? I have found this tool National Institute of Standards and Technology (NIST) FIPS Compliance Checker but I ...
Mohamed Safeek's user avatar
0 votes
0 answers
28 views

Which option of compliance information fits my application, and if needed any compliance documents, what are the documents?

I developed Flutter applications, that implement AES-256 encryption algorithm using the encrypt package (https://pub.dev/packages/encrypt), and also that implement the PBKDF2 hash algorithm, using the ...
Zohra's user avatar
  • 29
0 votes
2 answers
28 views

Newlines in HTTP

The HTTP 1.1 standard says that newlines are CRLF. However wget, lynx, and firefox, all accepts a response in UNIX format. Is it acceptable for a HTTP parser to simply skip all carriage returns in the ...
user877329's user avatar
  • 6,622
4 votes
2 answers
100 views

Is it possible to write a strictly conforming C program that outputs to the display?

According to ISO/IEC 9899:2017: A strictly conforming program shall use only those features of the language and library specified in this document. It shall not produce output dependent on any ...
Tux1's user avatar
  • 41
0 votes
0 answers
7 views

Most compliant Session duration on Mobile app and Website (best practice)

I would like to set a session duration for Mobile app and Website Some Pentest from Big4 recommended: 30 min inactivity logout (will this be even possible?) 30 days active session not allow multiple ...
dev's user avatar
  • 1,129
1 vote
1 answer
122 views

Azure Policy DeployIfNotExists fails to change values

I'm currently creating an Azure Policy that (is supposed to) deploys Microsoft Defender for Servers with Plan P1 if the current plan is different. Many subscriptions that I have currently have ...
Leonardo Tavares's user avatar
0 votes
0 answers
136 views

For NSCoding, which "Export Compliance Information" option I should select?

Upload new version of app on App store or for TestFlight. Will need to add "Missing Compliance" warning details. My app uses NSCoding, Which option I need to select from Apple "Export ...
RohitK's user avatar
  • 1,424
0 votes
0 answers
38 views

Samples html pages which are compliant with PDF/A-1a, PDF/A-1b, PDF/A-2a, PDF/A-2b, PDF/A-2u, PDF/A-3 conformance levels

I wanted to generate pdf which are compliant with certain conformance levels from cfhtmltopdf tag but I am not getting input/resource to generate pdf Where can I get the example/sample html webpages ...
mohitha d s's user avatar
0 votes
0 answers
46 views

PDF Accessibility | Title - Failed Error in Adobe Acrobat Pro using Apache FOP in Java

I'm working on Apache FOP to generate a PDF. As part of the compliance, I've enabled accessibility to true on FOUserAgent. Here's my below code snippet. FopFactory fopFactory = FopFactory.newInstance(...
Kishore Kumar Korada's user avatar
1 vote
0 answers
193 views

Which encryption algorithms does AWS Amplify use for iOs apps?

I am publishing my mobile app to the app store, it asks what type of encryption algorithm does my application uses and the options are: Encryption algorithms that are proprietary or not accepted as ...
JackLappa's user avatar
4 votes
0 answers
78 views

c16rtomb()/c32rtomb() locale-independent conversion?

C++11 introduced the c16rtomb()/c32rtomb() conversion functions, along with the inverse (mbrtoc16()/mbrtoc32()). c16rtomb() clearly states in the reference documentation here: The multibyte encoding ...
owacoder's user avatar
  • 4,776
0 votes
0 answers
117 views

Where to get free benchmarks for CIS CAT Lite in xml format?

i am planning to use CIS CAT Lite (free version) for auditing several RHEL servers. However, Lite version contains only few benchmarks and none of them is for RHEL. My problem is, i can not purchase ...
Adam Gajdošík's user avatar
0 votes
0 answers
120 views

AdMob in iOS app - Collected user data deletion

New to AdMob and trying to understand compliance as it relates to providing and deleting collected user data to a user upon request from purely programming standpoint. In my research, it appears that ...
Pendalar's user avatar
0 votes
0 answers
229 views

Firebase - GDPR+Schrems requires end-to-end encryption, but how?

I need to protect a group of user’s data, i.e. to facilitate multiple invited users to read and contribute protected data. My understanding is that I need to implement the following design: 1 . Each ...
peternissen's user avatar
0 votes
0 answers
58 views

Conditional Access "What If" on Microsoft Intune shows policy won't apply due to "Device Platform" even though device platform matches the policy

We're working to set up a Conditional Access policy that blocks iOS and Android devices from connecting to cloud apps if they are marked noncompliant. Compliance policy is already in place for the ...
George Barron's user avatar
0 votes
1 answer
164 views

What guarantees does C provide about enum ordinal values

When I convert enum to integer type, what can I expect? Does the first variant have value of 0? Does the variant ordinal number increment by 1? Assume that I did not explicitly provide the values. ...
jiwopene's user avatar
  • 2,905
5 votes
2 answers
2k views

Can we use Firebase Authentication and be GDPR compliant?

The Firebase Authentication is processing data exclusively in the United States, and is therefore not GDPR compliant. However, they are saying on the same site that: Firebase has moved to reliance on ...
erikkjer's user avatar
  • 119
-1 votes
1 answer
41 views

how can I execute a string formatting with out using exec function in python

I have an exec statement to set the formatting of two variables in python 3.6. Even though the code works fine, I need to change this due to compliance issue. Please let me know how it can be done ...
adusur's user avatar
  • 1
3 votes
1 answer
73 views

GCP suspension preventing access to our data

We have a Google Cloud Virtual Machine type N1 with 8 vCPU. The VM is used for restoring DB and extensive manipulation of the data. Google compliance team suspended the VM thinking we are involved in ...
Tal Haramaty's user avatar
1 vote
0 answers
74 views

MSVC: run time vs. compile time: 1.000000 vs. -nan(ind)

Sample code: #include <math.h> #include <stdio.h> typedef double T; T min(T a, T b) { return a < b ? a : b; } #define MIN(a,b) ((a) < (b) ? (a) : (b)) #define ONE ...
pmor's user avatar
  • 5,266
-4 votes
1 answer
108 views

Why isn't an IEC 60559 conformant implementation required to define __STDC_IEC_559__ (to 1)?

The C (C99+) standard requires (though implicitly) a conforming implementation to define __STDC__ to 1. However, the C standard does not require an IEC 60559 conformant implementation to define ...
pmor's user avatar
  • 5,266
1 vote
2 answers
140 views

Why don't non-strict floating-point models change the value 1 of __STDC_IEC_559__?

Sample code (t0.c): #include <stdio.h> // fix for clang, see https://stackoverflow.com/q/69976945/1778275 #if __STDC_IEC_559__ == 1 #pragma message "__STDC_IEC_559__ is 1" #else #...
pmor's user avatar
  • 5,266
1 vote
0 answers
75 views

C standard library: standard headers: is reserving of non-standard identifiers, which don't begin with underscore, considered acceptable practice?

I was just reading C11, 7.1.3 Reserved identifiers, 2, which says: No other identifiers are reserved. Here is a quick test: # gcc on Linux $ echo -e "#include <time.h>\n#define CLK_TCK&...
pmor's user avatar
  • 5,266
1 vote
0 answers
247 views

Cannot use -fsanitize=address in g++-11

I tryed to use -fsanitize=address option in g++-11. However, ld showed an error message when I executed command. Environment: OS: macOS Monterery Version 12.1 Beta (21C5021h) Arch: arm64 g++-11: ❯ g+...
earlgray283's user avatar
8 votes
3 answers
307 views

What are the examples of non-ISO practices, which are not found by -pedantic?

https://gcc.gnu.org/onlinedocs/gcc/Warning-Options.html : Some users try to use -Wpedantic to check programs for strict ISO C conformance. They soon find that it does not do quite what they want: it ...
pmor's user avatar
  • 5,266
1 vote
4 answers
134 views

What is the rationale for "semantics violation does not require diagnostics"?

Follow-up question for: If "shall / shall not" requirement is violated, then does it matter in which section (e.g. Semantics, Constraints) such requirement is located?. ISO/IEC 9899:202x (E) ...
pmor's user avatar
  • 5,266
2 votes
2 answers
134 views

If "shall / shall not" requirement is violated, then does it matter in which section (e.g. Semantics, Constraints) such requirement is located?

If "shall / shall not" requirement is violated, then does it matter in which section (e.g. semantics, constraints) such requirement is located? Reason of the question: this opinion: This is ...
pmor's user avatar
  • 5,266
2 votes
1 answer
348 views

Tentative definition of variable with internal linkage has incomplete non-array type: conforming implementations show different behavior

Follow-up question for: Why do conforming implementations behave differently w.r.t. incomplete array types with internal linkage?. Context: tentative definition of variable with internal linkage has ...
pmor's user avatar
  • 5,266
4 votes
2 answers
1k views

Microsoft C/C++: what is the definition of "strict conformance" w.r.t. implementation?

Context: /Za, /Ze (Disable Language Extensions): ... the C compiler conforms strictly to the C89/C90 standard /permissive- (Standards conformance): ... and sets the /Zc compiler options for strict ...
pmor's user avatar
  • 5,266
1 vote
0 answers
63 views

AWS Artifact & AWS Organizations

I want to download a SOC 2 TYPE 2 report from AWS artifact. In my company we use AWS Organizations to manage 20 different AWS accounts. I was wondering if it would be possible to download a single SOC ...
Dimi's user avatar
  • 289
0 votes
0 answers
1k views

Suppress or delete findings & violations (security hub/config) for default created resources by control tower?

I deployed control tower in the ca-central-1 region and enabled security hub and aws config through a dedicated admin account (audit account provided by default via control tower). I then enabled the ...
kryogenic1's user avatar
1 vote
1 answer
558 views

How to fix s3-bucket-policy-grantee-check non-compliance?

I deployed a NIST CSF conformance pack on my AWS account, via AWS Config, to improve my security posture. One of my resources was non-compliant due to the s3-bucket-policy-grantee-check not passing. ...
kryogenic1's user avatar
4 votes
2 answers
91 views

Can extension cancel the existing standard requirements?

Follow-up question for Why do conforming implementations behave differently w.r.t. incomplete array types with internal linkage?. Context: in both gcc and clang (conforming implementations) by default ...
pmor's user avatar
  • 5,266
-1 votes
1 answer
106 views

Why C compiler validation suites themselves may use the C standard library if the C standard library is actually under test?

How it is possible for C compiler validation suites to use any feature of the C standard library if the C standard library is actually under test and may be buggy (which invalidates the validation ...
pmor's user avatar
  • 5,266
1 vote
1 answer
186 views

Autosar standard-compilant way to use regex

I need to parse URI-like string. This URI is specific to the project and corresponds to "scheme://path/to/file", where path should be a syntactically correct path to file from filesystem ...
ivoriik's user avatar
  • 155
5 votes
1 answer
165 views

Why do conforming implementations behave differently w.r.t. incomplete array types with internal linkage?

Sample code (t0.c): static int arr[ ]; int main( void ) { return arr[ 0 ]; } static int arr[ ] = { 0 }; Invocations: $ gcc t0.c -std=c11 -Wall -Wextra <nothing> $ clang t0.c -std=c11 ...
pmor's user avatar
  • 5,266
-3 votes
1 answer
82 views

If an implementation supports extra nonstandard features, then is such implementation conforming?

Follow-up question for: Do unsupported standard features affect conformance?. Question: if an implementation supports extra features which are not described in the C standard, nor in any "...
pmor's user avatar
  • 5,266
0 votes
1 answer
95 views

Do unsupported standard features affect conformance?

Context: C compilers deliberately do not support some features while being conforming implementations. Is it ok? Some examples. All of the compilers down below are conforming implementations (__STDC__ ...
pmor's user avatar
  • 5,266
4 votes
0 answers
108 views

Annex F conforming Intel targeted clang / gcc does not raise "invalid" floating-point exception for (signed char)128.0f, bug?

Annex F requires raising of "invalid" floating-point exception (C11, Annex F, F.4 Floating to integer conversion): ... if the floating value is infinite or NaN or if the integral part of ...
pmor's user avatar
  • 5,266
2 votes
1 answer
50 views

Are HAS_SUBNORM and __STDC_IEC_559__ dependent?

Are HAS_SUBNORM and __STDC_IEC_559__ dependent? For example: If __STDC_IEC_559__ is 1, then HAS_SUBNORM is 1. If HAS_SUBNORM is 0, then __STDC_IEC_559__ is not 1.
pmor's user avatar
  • 5,266
0 votes
1 answer
124 views

Is there any C compiler able to detect the violation of a "strictly conforming program"? [duplicate]

Is there any C compiler able to detect* the violation of a "strictly conforming program"? * under some option, for example, --accept-only-strictly-conforming-program If no, then which tools ...
pmor's user avatar
  • 5,266
0 votes
1 answer
21 views

Accesibility Compliance Error on keyboard access

I'm trying to solve all the issues related to the 508 complianca and I'm struggling with on of them. Verify the <div> element with "menu" role has keyboard access How can I add ...
Avedis Maroukian's user avatar
1 vote
1 answer
97 views

Why in Java pow(1, qNaN) is qNaN while in IEEE 754-2008 pow(1, qNaN) is 1?

Why in Java pow(1, qNaN) is qNaN while in IEEE 754 pow(1, qNaN) is 1? Java: System.out.println(Math.pow(1, Double.NaN)); // prints NaN (which is qNaN) $ javac --version javac 11.0.11 IEEE 754-2008, ...
pmor's user avatar
  • 5,266
1 vote
0 answers
259 views

How no support of #pragma STDC FENV_ACCESS ON affects __STDC_IEC_559__ and __STDC__?

This simple code (t217.c): #include <stdio.h> #include <fenv.h> #include <float.h> #pragma STDC FENV_ACCESS ON int main( void ) { feclearexcept( FE_ALL_EXCEPT ); ( void )( ...
pmor's user avatar
  • 5,266
-1 votes
2 answers
165 views

Shall a #pragma leading to nonstandard behavior cause __STDC__ macro not to be defined to 1?

Simple question: shall a #pragma leading to nonstandard behavior cause __STDC__ macro not to be defined to 1? (Does the C standard explicitly prescribes that? If yes, then in which section? If no, ...
pmor's user avatar
  • 5,266
-2 votes
1 answer
70 views

HTML 5 Validation Service

I am trying to check HTML 5 files for validity and have found the W3C validator. However I have found that this validator accepts grossly wrong HTML documents like this one: <!DOCTYPE html> <...
Harry Berry's user avatar
1 vote
1 answer
171 views

Why Clang running on Windows has no C conformance (__STDC__ is not defined to 1)?

Sample code (t127.c): #include <stdio.h> int main(void) { int ret; #if __STDC__ == 1 printf("Has C conformance to version "); #if __STDC_VERSION__ printf("%ld", ...
pmor's user avatar
  • 5,266
2 votes
1 answer
100 views

Why does this use of the detection idiom result in different compilation errors for Clang and GCC and none for MSVC

While playing around with the detection idiom and void_t I found that expressions where the subtraction operator and void* are involved lead to different errors in the tested compilers. GCC 10.2 and ...
jesses's user avatar
  • 538
0 votes
1 answer
266 views

Is there any C compiler which defines both __STDC__ and __STDC_IEC_559__ to 1?

Is there any C compiler(s) which defines both __STDC__ and __STDC_IEC_559__ to 1? If so, then which one(s)? Reason of the question: as far as I can test (April 2021), none of the latest versions of ...
pmor's user avatar
  • 5,266
3 votes
1 answer
105 views

Why is this combination of move and value constructor ambigous for MSVC but not for Clang and GCC in C++17 and above

I have the following code struct R { int i_ = 8; R() = default; R(R const& o) = default; R(R&& o) = default; R(int i) : i_(i) {} operator int() const { return i_; } ...
jesses's user avatar
  • 538

1
2 3 4 5
8