Agenda: Meeting #44 on Programming Language Vulnerabilities, April 15-16 2016

Document ISO/IEC/JTC 1/SC 22/WG 23 N0680

Draft Agenda Post-Meeting 47 Telecon
ISO/IEC JTC 1/SC 22/WG23
13 February 2017

Agenda revised to correct future meeting schedule.

Meeting Location :

Teleconference/Webex

Meeting Times:

13 February 2017: 2100-2300 UTC

WebEx Info

ISO/IEC/JTC1/SC22/WG23 post meeting 47 WebEx

Monday, February 13, 2017 4:00 pm | Eastern Standard Time (New York, GMT-05:00)

Duration 2 hrs

Meeting number (access code): 959 186 646

Meeting password: wg23 Add to Calendar

When it's time, join the meeting.

Join by phone

0800-051-3810 Call-in toll-free number (UK)

+44-203-478-5289 Call-in toll number (UK)

Global call-in numbers | Toll-free calling restrictions Can't join the meeting? IMPORTANT NOTICE: Please note that this WebEx service allows audio and other information sent during the session to be recorded, which may be discoverable in a legal matter. By joining this session, you automatically consent to such recordings. If you do not consent to being recorded, discuss your concerns with the host or do not join the session.

Local Contacts:

Stephen Michell ([email protected]), mobile +1 613 299 9047

IMPORTANT:

Agenda

1 Opening activities

1.1 Opening Comments

1.2 Introduction of Participants/Roll Call

1.3 Procedures for this Meeting

1.4 Approval of previous Minutes (for face-to-face meetings only)

1.5 Review of actions items and resolutions, Action Item and Decision Logs

1.6 Approval of Agenda [N 0680]

1.7 Future Meeting Schedule


2018

Pre-mtg 55	01/11/18
#54	TBD September 2018	CSA Toronto, Canada with SC 22
#53	15-16/06/18	With WG 9 and Ada Europe
Pre-mtg-53	Teleconference
#52	TBD April 2018	Czech Republic with C
Pre-mtg 52	TBD March 2018
#51	22-23 January 2018	Phoenix, AZ

2017
pre-mtg-51	20/11/17	Teleconference (UTC 2000, 2 hr)
post-mtg-50	16/10/17	Teleconference (UTC 2000, 2 hr)
#50	17-18 August 2017	BSI London (with SC 22 Plenary)
#49	19-20 June 2017	Vienna, Austria with Ada Europe(2 day)
post-mtg-48	15/05/17	Teleconference (UTC 2000, 2 hr)
#48	6-7 April 2017	IBM Markham, Canada (2 day)
pre-mtg-48	Mar 6, 17	Teleconference (UTC 2100, 2 hr)
Post-mtg-47	13/02/17	Teleconference (UTC 2100, 2 hr)	Dedicated topic, Templates and Generics in Part 1, capturing C++ issues.

2. Liaison Activities (not for discussion at this meeting)

2.1 SC 22

2.2 PL 22 (Open)

2.3 PL22.3/WG5 (Fortran)

2.4 WG4 (COBOL)

2.5 WG9 (Ada)

2.6 PL22.11/WG14 (C)

2.7 PL22.16/WG21 (C++)

2.8 Ecma International, TC49/TG2 (C#)

2.9 Ecma International, TC39 (ECMAScript)

2.10 MISRA (C)

2.11 MISRA (C++)

2.12 SPARK

2.13 SC7/WG19 (UML)

2.14 SC27/WG3, WG4 Security

2.15 Other Liaison Activities or National body reports

3. Document Review

3.1 TR 24772-1 Vulnerabilities, language independent

Document N0689, clause 40 Templates and Generics.

At the present time, clause 40 reflects the view of templates and generics from a perspective similar to Ada. C++ has a different model of generics. This meeting is to discuss the different models of templates and generics, and determine how to update 6.40 to reflect a broader view and to capture what vulnerabilities exist from the C++ model.

3.2 TR 24772-2 Ada language specific part

3.3 TR 24772-3 C language specific part

3.4 TR 24772-4 Python language specific part

3.5 TR 24772-8 Fortran

3.6 TR 24772-9 C++

Document N0691 is the first draft of a potential C++ Part. It is largely a remapping of Part 3 C. C++ participants are requested to review the document and suggest ways to sharpen the C-specific discussions, to capture ways that C++ features can mitigate vulnerabilities, and to help capture C++ vulnerabilities that do not exist in C.