Valid

GB/T 34943-2017Source code vulnerability testing specification for C/C++ (English PDF)

C/C++语言源代码漏洞测试规范

Preview PDF

This is a limited preview

Buy now to download the full PDF (35 pages)

Need quotation for your management?

Get a formal quotation for GB/T 34943-2017 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

November 1, 2017

Implementation date

May 1, 2018

Scope

GB/T 34943-2017 is the English-translated version of C/C++语言源代码漏洞测试规范.

GB/T 34943-2017 is the Chinese standard "Source code vulnerability testing specification for C/C++". Its scope clause reads: This standard specifies the C/C language source code vulnerability testing of the test and test content.

This standard applies to developers or third-party agencies testers using automated static analysis tools carried out C/C language source Code loopholes in testing activities, C/C programming and coding staff and source code vulnerability testing tools designers can also refer to use. Its clauses include terms and definitions.

Found what you need?

Document preview — GB/T 34943-2017

National Standard of the People's Republic of China

ICS: 35.080
Classification: L 77

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Abbreviations
5 source code loopholes in the general test
5.1 source code vulnerability testing purposes
5.2 source code vulnerability testing process
5.3 source code vulnerability management test
5.4 source code vulnerability testing tools
5.5 source code vulnerability testing document
6 source code vulnerability testing content
6.1 source code vulnerability classification
6.2 Source Code Vulnerability Description
Appendix A (informative) C/C language source code vulnerability test case
Appendix B (informative) C/C language source code Vulnerability categories and names
References

1 Scope

This standard specifies the C/C language source code vulnerability testing of the test and test content.

This standard applies to developers or third-party agencies testers using automated static analysis tools carried out C/C language source

Code loopholes in testing activities, C/C programming and coding staff and source code vulnerability testing tools designers can also refer to use.

2 Normative references

The following documents for the application of this document is essential. For dated references, only the dated version applies to this article

Pieces. For undated references, the latest edition (including all amendments) applies to this document.

Information technology - Software engineering terminology

Computer software test specification

GB/T 20158-2006 Information technology software life cycle process configuration management (ISO /IEC TR15846.1998, IDT)

3 Terms and definitions

GB/T 11457 and defined by the following terms and definitions apply to this document.

3.1 Access control

A means to ensure that resources of a data processing system can only be accessed by authorized entities on an authorized basis.

[GB/T 25069-2010, definition 2.2.1.42]

3.2 Attack

Attempt (including theft of data) to destroy, compromise, alter, or disable a system or information in an information system.

[GB/T 25069-2010, Definition 2.2.1.58]

3.3 Password packet link cipherblockchaining

When encrypting information, each ciphertext block relies on the previous ciphertext block when it is encrypted.

3.4 Ciphertext

The use of encryption technology, the transformation, the information content is hidden data.

[GB/T 25069-2010, definition 2.2.2.105]

3.5 Decryption

The ciphertext is converted to plaintext processing, that is, the corresponding reverse process of encryption.

[GB/T 25069-2010, definition 2.2.2.69] […]

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 35 pages — is available in the English PDF.

Referenced standards

Cited by

GB/T 45906.10-2025Substation secondary system - Part 10: Test and detection

Similar standards

GB/T 43208.2-2025|GB/T 45803-2025|GB/T 45989-2025|GB/T 46012-2025|GB/T 46900-2025|GB/T 33136-2024

How to Download GB/T 34943-2017

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.