The CERT C secure coding standard

What Hacker News says

1. pjmlpDec 2022
   Learn C using the classical books, but also care about how to mitigate security issues while coding in C.

   "Secure Coding in C and C++"

   https://www.oreilly.com/library/view/secure-coding-in/978013...

   "The CERT C Secure Coding Standard"

   https://www.oreilly.com/library/view/the-cert-c/978032160319...

   MISRA-C

   https://www.misra.org.uk/

   Frama-C

   https://frama-c.com/

   Also have a look at the static analysis and warnings available across all major C compilers.

   Show morethread
2. bdelayMar 2020
   I took Seacord's virtual class (CMU SEI? Can't remember) on Secure C coding a few years back and own, love, and regularly use the The CERT C Secure Coding Standard.

   I learned from K&R, but highly recommend Seacord's books if you're looking for how to write secure C and a more modern take on some of the trickier parts of C.

   thread
3. hackermailmanJan 2017
   CS:App you can find it used/cheap on Abe books. You probably want the 3rd version that covers x86-64.

   Look at the TOC it covers floating point, TMin/Tmax overflow and casting to unsigned problems, gcc use, assembly (enough to understand how exactly pointers work) and many other things including VM/CPUs/Cache memory ect http://csapp.cs.cmu.edu/

   The book Hacker's Delight 2 picks up from here and shows you all kinds of bitshifting tricks and other C specific optimizations, The Art of Software Security Assessment to show you safer C and Robert Seacord's book on The CERT C Secure Coding Standard.

   Show morethread