I bought lots of books and followed their examples, but just didn’t seem to get it. Win32 Programming using CĪ personal story: I struggled for months to learn Windows programming with my (then) new copy of MSVC++5. David Ireland was one of the first seven programmers to receive this qualification in C, see SANS Institute press release. For more information see GSSP Certification Exam. Look at the GIAC Secure Software Programmer (GSSP) Certification Exam developed in a joint effort involving the SANS Institute, CERT/CC, several US government agencies. The authors provide more information, links and downloads on their site. For a more detailed work with lots of instantly useable examples for both Windows and Unix, try Secure Programming Cookbook for C and C++ by John Viega and Matt Messier, O’Rielly Media, 2003. This not only explains clearly what the problems are but provides useful links. Secure Programming in Cįor a good introduction see Secure Programming in C and C++ by Robert C. We note that many C++ programs we come across are really just plain old C with the printf replaced by cout. We’re old luddites who hate learning new tricks.Programs written 20 years ago are still just as valid today as they were then.With good structure and coding practices, it’s often just as “safe” as OOP.It generates smaller executables (much smaller in the case of MFC).It’s usually easier to work out what the program’s doing.Quotes from Writing Unmaintainable Code: “Testing is for cowards”, “Never, Ever Do Any Performance Testing” and “Never Validate”.Interesting articles and links on C Programming.Free programs and utilities to download.Some cute programs in C including the first 800 digits of pi in 160 characters of code, Diffie-Hellman in 10 lines of C, and a tricky one-liner by David Korn.More on buffer overflows – MSVC’s _snprintf.

Avoiding buffer overflows – strlcpy and strlcat.Recommended books on the C Programming Language.

C puzzles by alan r feuer pdf