The CERT (R) C Coding Standard, Second Edition - Robert C. Seacord

. .

Résumé :
This book is an essential desktop reference for the CERT C coding standard. The CERT C Coding Standard is an indispensable collection of expert information. The standard itemizes those coding errors that are the root causes of software vulnerabilities in C and prioritizes them by severity, likelihood of exploitation, and remediation costs. Each guideline provides examples of insecure code as well as secure, alternative implementations. If uniformly applied, these guidelines will eliminate the critical coding errors that lead to buffer overflows, format string vulnerabilities, integer overflow, and other common software vulnerabilities.

Sommaire:
*Introduction*Preprocessor (PRE)*Declarations and Initialization (DCL)*Expressions (EXP)*Integers (INT)*Floating Point (FLP)*Arrays (ARR)*Characters and Strings (STR)*Memory Management (MEM)*Input Output (FIO)*Environment (ENV)*Signals (SIG)*Error Handling (ERR)*Concurrency (CON)*Miscellaneous (MSC) Bibliography Definitions Undefined Behavior (may be Appendices) Unspecified Behavior (may be Appendices)