The C rules and recommendations in this wiki are a work in progress and reflect the current thinking of the secure coding community. Because this is a development website, many pages are incomplete or contain errors. As rules and recommendations mature, they are published in report or book form as official releases. These releases are issued as dictated by the needs and interests of the secure software development community.
more here...........https://www.securecoding.cert.org/confluence/display/c/CERT+C+Coding+Standard
more here...........https://www.securecoding.cert.org/confluence/display/c/CERT+C+Coding+Standard