Document ISO/IEC/JTC 1/SC 22/WG 23 N0491


Minutes of Meeting #30
ISO/IEC JTC 1/SC 22/WG 23: Programming Language Vulnerabilities
10 November 2014

Meeting Times:

10 November 2014: 20H00 UTC (22H00 CET, 21H00 UK summer, 16H00 EST, 13H00 PST)

Agenda

Participants

Erhard Ploedereder
Stephen Michell (convenor)
Tullio Vardenega
David Keaton
Larry Wagoner
Tatsuaki Takebe

1. Opening activities

1.1 Opening Comments

1.2 Introduction of Participants/Roll Call

1.3 Procedures for this Meeting

1.4 Approval of previous Minutes –

Approve.

1.5 Review of actions items and resolutions, Action Item and Decision Logs

1.6 Approval of Agenda

1.7 Future Meeting Schedule

2016

#41

#40




TBD

TBD


#39

Feb-May

Monthly teleconference

2015

#38

#37

Sept/Oct 2015

week June 22-26

With SC 27

Madrid with Ada Europe

#36

May 18

Teleconference, 2100 UTC

#35

April 20

Teleconference, 2100 UTC

#33

March 23

Teleconference, 2100 UTC

#32

February 23

Teleconference Every 4th Monday (Tuesday for Tatsuaki) at 2100 UTC starting 23 Feb.

#31

January 26-27

Houston – Clear Lake close to NASA. Meeting fee. (subject to Doodle Poll either 12/13 Jan, 19/20 Jan or, 26/27 Jan)



2. Liaison Activities (as needed)

2.1 SC 22

2.2 PL22.3/WG5 (Fortran)

2.3 PL22.4/WG4 (COBOL)

2.4 WG9 (Ada)

2.5 PL22.11/WG14 (C)

2.6 PL22.16/WG21 (C++)

2.7 Ecma International, TC49/TG2 (C#)

2.8 Ecma International, TC39 (ECMAScript)

2.9 MISRA (C)

2.10 MISRA (C++)

2.11 SPARK

2.12 SC7/WG19 (UML)

2.13 SC27/WG3, WG4 Security

Steve reported on the liaison with SC 27 WG 3. Steve and Tatsuaki attended the SC 27/WG 3 meeting in Mexico, October 2014. SC 27/WG 3 is pleased to be working with WG 23 and hopes that we will be useful to each other. At the WG 23 meeting, we confirmed that we want a liaison with SC 27/WG 3 and approved Steve sending that information to SC 27/WG 3. We discussed meeting with them in fall 2015 and authorized Steve to discuss this with the convenor and secretary.

2.14 Other Liaison Activities or National body reports

3. Document Review

    1. DIS 17960 Code Signing
      - Ballot passed (one negative ballot)
      - Resolution of DIS comments Document N0497 on N0470.
      - Recommended disposition is captured in document N0500

    2. TR 24772 Vulnerabilities

      No further discussion held this meeting, except to decide that this will be the main focus of the January 2015 meeting. Attendees are encouraged to evaluate the state of the document and to bring proposals to the meeting.

4. Other Business

4.1 Business Plan – schedule and detail.

4.2 Assignment of responsibilities

Liaisons
Editor / Editing Group

4.3 Promotion of WG23 Products, Steve Michell, per Action Item #21–6

5. Resolutions

WG 23 unanimously agrees to have a liaison with SC 27 WG 3.

6. Action Items

AI 30-01Steve to set up January meeting,

30-02 Erhard & Steve to set agenda with SC 27 WG 3 for fall 2015 meeting.

30-03 Steve – AI Doodle poll for date of meeting 31.

7. Adjournment