Secure and Reliable C

Course content

1. 1Why C code failsComing
2. 2The dangers of undefined behaviorComing
3. 3Buffer overflows and how to prevent themComing
4. 4Safe string and memory handlingComing
5. 5Integer overflow and conversionsComing
6. 6Defensive programming and assertionsComing
7. 7Unit testing in CComing
8. 8Fuzz testingComing
9. 9CERT C and MISRA guidelinesComing
10. 10Code review for CComing
11. 11Static and dynamic analysis toolsComing
12. 12Capstone: hardening an existing programComing

Requirements

• CPRG-120 Structs, Files and Modular C
• CPRG-130 C Build Tools and Debugging

Recommended background. You can start any course at any time.

Description

Writing C that does not break: undefined behavior, buffer overflows and defensive coding, safe string handling, testing in C and coding standards such as CERT C and MISRA.

Part of the Information Technology stream, typically taken in year 2.