It sounds as if the root of the problem is the C standard.  Wouldn&#x27;t it be better to fix that instead of creating a shadow standard defined by the implementation of this boring compiler?<p>I also object to the presupposition that there is secure software and non-secure software.  In most practical cases, it is impossibly hard to tell in which class an application falls, so it would be better not to make that distinction at all.