[metadata]
id = "MSC06-C"
type = "recommendation"
category = "MSC"
number = 6
title = 'Beware of compiler optimizations'
description = '''
Subclause 5.1.2.3 of the C Standard [ ISO/IEC 9899:2011 ] states:
This clause gives compilers the leeway to remove code deemed unused or unneeded
when building a program. Although this functionality is usually beneficial,
sometimes the compiler removes code that it thinks is not needed but has been
added for a specific (often security-related) purpose.
'''
severity = "Medium"
likelihood = "Probable"
priority = "P12"
level = "L1"
cert_version = "2016 Edition (Wiki)"
last_modified = "Unknown"
[rules.cert_c.MSC06-C]
enabled = true
[references]
wiki = "https://cmu-sei.github.io/secure-coding-standards/sei-cert-c-coding-standard/recommendations/miscellaneous-msc/msc06-c"
cwe = ["CWE-14"]