securitysecure-c
Secure C Coding security skill
安装与使用
请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求，再添加到工作流。
查看来源 ↗使用指南技能说明
Secure C Coding
Avoid dangerous functions, use safe alternatives, enable compiler hardening.
Banned Functions → Safe Alternatives
| Banned | Why | Use Instead |
|---|---|---|
strcpy |
No bounds | strncpy, strlcpy, snprintf |
strcat |
No bounds | strncat, strlcat |
sprintf |
No bounds | snprintf |
gets |
Always unsafe | fgets |
scanf("%s") |
No bounds | scanf("%Ns") with width |
mktemp |
Race condition | mkstemp |
atoi |
No error detection | strtol with validation |
Compiler Hardening
CFLAGS += -fstack-protector-strong # Stack canaries
CFLAGS += -D_FORTIFY_SOURCE=2 # Runtime buffer checks
CFLAGS += -fPIE -pie # ASLR for executables
LDFLAGS += -Wl,-z,relro,-z,now # GOT protection
Static Analysis
-
make lint- clang-tidy checks -
cppcheck --enable=all - Compiler warnings:
-Wall -Wextra -Werror
Review red flags: Any banned function, missing bounds on string ops, char buf[N] with unchecked input.
使用示例
查看来源仓库中的使用示例与配置说明。
查看来源 ↗来源历史
- 收录时间
- 2026-01-20
- 索引更新时间
- 2026-01-26
- Branch
- main
收录与同步日期属于本站记录。源码修改历史请查看来源仓库。
GitHub ↗chat Comments (0)
Sign in to join the discussion and leave a comment.
No comments yet. Be the first to share your thoughts!