parts/6.53.ProvisionOfInherentlyUnsafeOperations-SKL.md

6.53 Provision of Inherently Unsafe Operations [SKL]

6.53.1 Applicability to language

The vulnerability as described in ISO/IEC 24772-1:2019 clause 6.53 applies to C++. In particular, anything described by ISO/IEC 14882:2023 as “undefined behaviour” [EWF] is unsafe.

6.53.2 Avoidance mechanisms for language users

To avoid the vulnerability or mitigate its ill effects, C++ software developers can:

• Use the avoidance mechanisms of ISO/IEC 24772-1:2024 and ISO/IEC TR 24772-3:2020 clause 6.53.5.

• Enable checks that warn about unsafe operations.

• Use static analysis tools to detect unsafe constructs.