Valgrind 3.3.0 released

Valgrind is an award-winning suite of tools for debugging and profiling Linux programs. With the tools that come with Valgrind, you can automatically detect many memory management and threading bugs, avoiding hours of frustrating bug-hunting, making your programs more stable. You can also perform detailed profiling, to speed up and reduce memory use of your programs.

The Valgrind distribution currently includes four tools: a memory error detector, a cache (time) profiler, a call-graph profiler, and a heap (space) profiler. It runs on the following platforms: X86/Linux, AMD64/Linux, PPC32/Linux, PPC64/Linux.

The main excitement in 3.3.0 is new and improved tools. Helgrind
works again, Massif has been completely overhauled and much improved,
Cachegrind now does branch-misprediction profiling, and a new category
of experimental tools has been created, containing two new tools:
Omega and DRD. There are many other smaller improvements. [...]

Defend Your Code with Top Ten Security Tips Every Developer Must Know

MSDN Magazine, September 2002
Michael Howard and Keith Brown




Content

• 1. Trust User Input at Your Own Peril
• 2. Protect Against Buffer Overruns
• 3. Prevent Cross-site Scripting
• 4. Don't Require sa Permissions
• 5. Watch that Crypto Code!
• 6. Reduce Your Attack Profile
• 7. Employ the Principle of Least Privilege
• 8. Pay Attention to Failure Modes
• 9. Impersonation is Fragile
• 10. Write Apps that Non-admins Can Actually Use

English English Deutsch Español Français Italiano 日本語 한국어 Português Pусский 简体中文繁體中文

CERT Secure Coding Projects

http://www.cert.org/secure-coding/

CERT Secure Coding Standards
A collaborative site that provides rules and recommendations for secure coding practices in the C and C++ programming languages

Managed string library
The managed string library provides a more secure alternative to standard null-terminated byte strings in C. Managed string functions dynamically allocate memory as required, eliminating the possibility of buffer overflows, string truncation, and other common programming errors.

Secure integer library
This library includes functions for safe integer conversions and arithmetic operations.

Publications Podcast RSS