Checked code

Checked code is an opt-in safety check for selected C functions. A successful check means that the supported operations are established under the function’s reported entry requirements and trusted boundaries. It does not certify unselected code, external libraries, the compiler implementation, or arbitrary C. It adds no runtime checks and changes no pointer ABI.

In this guide

• Select functions
• Build through the compiler
• Understand contracts
• Check traversals and cursor helpers
• Check input cases and union members
• Read a report
• Check opaque pointers and callback interfaces
• Current limits
• Linked containers
• Recursive object ownership
• Growable buffers and vectors
• C runtime contracts
• Opaque objects and private library state