Re:GnuTLS considered harmful (2008)
by serbaut on Wednesday March 05, 2014 @04:55PM
(#7350221)
Can you link to the 30 years of best practice document, I must have missed it.
[ Parent
| on HN ]
Re:GnuTLS considered harmful (2008)
by spiralpolitik on Wednesday March 05, 2014 @07:44PM
(#7351073)
A good place to start:
http://www.amazon.com/The-CERT-Secure-Coding-Standard/dp/032...
Online:
https://www.securecoding.cert.org/confluence/display/seccode...
Others:
http://www.amazon.com/Secure-Coding-Edition-Software-Enginee...
http://www.amazon.com/Style-Guidelines-Programming-Professio...
http://www.amazon.com/C-Traps-Pitfalls-Andrew-Koenig/dp/0201...
Another good read (it probably does not reflect how you want to write C code, the rule about dynammic allocation is probably extreme if you are not writing code to fly spaceships, but I think it is good to read regardless): http://lars-lab.jpl.nasa.gov/JPL_Coding_Standard_C.pdf