https://www.securecoding.cert.org/confluence/pages/viewpage.action?pageId=637