Agenda: Meeting #44 on Programming Language Vulnerabilities, April 15-16 2016

Document ISO/IEC/JTC 1/SC 22/WG 23 N0698

Draft Agenda Pre-Meeting 48 Telecon
ISO/IEC JTC 1/SC 22/WG23
6 March 2017

Meeting Location :

Teleconference/Webex

Meeting Times:

13 February 2017: 2100-2300 UTC

WebEx Info

JTC1/SC22/WG23 pre-meeting 48 Webex

Monday, March 6, 2017

4:00 pm | Eastern Standard Time (New York, GMT-05:00) |

2 hrs

Meeting number (access code): 958 915 676

Meeting password: wg23

When it's time, join the meeting.

Join by phone

0800-051-3810 Call-in toll-free number (UK)

+44-203-478-5289 Call-in toll number (UK)

Global call-in numbers |

Toll-free calling restrictions

Can't join the meeting?

IMPORTANT NOTICE: Please note that this WebEx service allows audio and other information sent during the session to be recorded, which may be discoverable in a legal matter. By joining this session, you automatically consent to such recordings. If you do not consent to being recorded, discuss your concerns with the host or do not join the session.

Local Contacts:

Stephen Michell ([email protected]), mobile +1 613 299 9047

IMPORTANT:

Agenda

1 Opening activities

1.1 Opening Comments

1.2 Introduction of Participants/Roll Call

1.3 Procedures for this Meeting

1.4 Approval of previous Minutes (for face-to-face meetings only)

1.5 Review of actions items and resolutions, Action Item and Decision Logs

1.6 Approval of Agenda [N 0680]

1.7 Future Meeting Schedule


2018

Pre-mtg 55	01/11/18
#54	12-14 September 2018	Ottawa Canada
#53	15-16 June 2018	With WG 9 and Ada Europe
Pre-mtg-53	Teleconference
#52	TBD April 2018	Czech Republic
Pre-mtg 52	TBD March 2018
#51	22-23 January 2018	Phoenix, AZ

2017
pre-mtg-51	20/11/17	Teleconference (UTC 2000, 2 hr)
post-mtg-50	16/10/17	Teleconference (UTC 2000, 2 hr)
#50	17-18 August 2017	BSI London (with SC 22 Plenary)
#49	19-20 June 2017	Vienna, Austria with Ada Europe(2 day)
post-mtg-48	15/05/17	Teleconference (UTC 2000, 2 hr)
#48	6-7 April 2017	IBM Markham, Canada (2 day)

		I

2. Liaison Activities (not for discussion at this meeting)

2.1 SC 22

2.2 PL 22 (Open)

2.3 PL22.3/WG5 (Fortran)

2.4 WG4 (COBOL)

2.5 WG9 (Ada)

2.6 PL22.11/WG14 (C)

2.7 PL22.16/WG21 (C++)

2.8 Ecma International, TC49/TG2 (C#)

2.9 Ecma International, TC39 (ECMAScript)

2.10 MISRA (C)

2.11 MISRA (C++)

2.12 SPARK

2.13 SC7/WG19 (UML)

2.14 SC27/WG3, WG4 Security

2.15 Other Liaison Activities or National body reports

3. Document Review

3.1 TR 24772-1 Vulnerabilities, language independent

Document N0696 on Fault Tolerance [REU] was submitted by Erhard Ploedereder following the last Webex. We will consider it for Part 1.

Document N0689, clause 40 Templates and Generics.

At the present time, clause 40 reflects the view of templates and generics from a perspective similar to Ada. C++ has a different model of generics. This meeting is to discuss the different models of templates and generics, and determine how to update 6.40 to reflect a broader view and to capture what vulnerabilities exist from the C++ model.

Since attendees from a WG 21 background are not familiar with the document, our style of writing and constructing vulnerability descriptions, nor the model presented in clause 6.40, we defered discussion from the last WebEx telecon.

3.2 TR 24772-2 Ada language specific part

The Ada Part has been returned to WG 9 to incorporate writeups for the additional sections on OO vulnerabilities.

3.3 TR 24772-3 C language specific part

3.4 TR 24772-4 Python language specific part

3.5 TR 24772-8 Fortran

3.6 TR 24772-9 C++

C++ members attended the WG 21 meeting in Kona, 27 Feb – 3 March. They will report back on discussions with WG 21 leadership and ways that we can create a Part 9 for C++.