Vladimir Kushnir的《Safe C++》：保障安全编程指南

需积分: 9 18 浏览量更新于2024-07-18 收藏 2.98MB PDF 举报

《安全C++：保护你的代码与编程实践》(Safe C++)是一本由Vladimir Kushnir撰写的书籍，专为那些寻求在C++编程中提升代码安全性和健壮性的开发者而设计。这本书的出版日期为2012年，由O'Reilly Media发行，版权属于Vladimir Kushnir，强调了在全球多个城市如北京、剑桥、法纳姆等地的分发。该书不仅提供了印刷版，还同步发布了在线版本，方便读者通过网址<http://my.safaribooksonline.com>获取。《Safe C++》是一本实用性很强的手册，深入讲解了如何在C++编程中实施安全最佳实践，旨在帮助开发者避免常见的安全漏洞，如缓冲区溢出、类型安全问题和内存管理错误。作者Vladimir Kushnir以其丰富的经验和深入理解，引导读者了解和应用现代C++技术，以创建更安全、更可靠的软件。书中涵盖了以下核心知识点： 1. C++安全编程基础：介绍C++语言特性对安全的影响，包括潜在的危险区域，如指针操作和动态内存管理。 2. 内存安全：讲解如何正确地使用new和delete，以及智能指针（如unique_ptr和shared_ptr）来管理内存，防止内存泄漏和悬挂指针。 3. 类型安全：讨论如何通过模板、泛型编程和类型系统来提高代码的类型安全性，减少运行时错误。 4. 输入验证与防御式编程：强调输入参数的验证和错误处理策略，以防止SQL注入、格式化字符串攻击等常见攻击手段。 5. 异常处理和错误处理：提供如何有效地捕获和恢复程序运行中的异常，以降低程序崩溃的风险。 6. 线程安全：讲解并发编程中的同步机制，如互斥锁、条件变量和原子操作，以避免数据竞争和死锁。 7. 安全编码最佳实践：分享实际项目中的安全编码指南，包括静态分析工具的使用和代码审查的重要性。 8. 安全库和框架：介绍现有的C++安全库和框架，如Boost.Asio和Crypto++，以及如何选择和使用它们。 9. 安全测试和审计：探讨如何通过单元测试、代码审查和安全审计确保代码质量，以及现代的安全测试框架。该书还包含了修订历史和在线资源链接，以便读者追踪最新信息和获取额外的支持。《Safe C++》作为一本"Nutshell Handbook"，其内容精炼实用，适合于任何希望提高C++代码安全性的专业开发人员或初学者阅读。通过学习本书，读者将能提升自己在C++编程领域的安全意识和技术水平。

• Class names are MultipleWordsWithFirstLettersCapitalizedAndGluedTogether; for

example:

class MyClass {

• Function names (a.k.a. methods) in those classes FollowTheSameConvention; ex-

ample:

MyClass(const MyClass& that);

void DoSomething() const;

This is because in C++ the constructor must have the same name (and the de-

structor a similar name) as a class, and since they are function names in the class,

we might as well make all functions look the same.

• Variables have names that are lowercase_and_glued_together_using_underscore.

• Data members in the class follow the same convention as variables, except they

have an additional underscore at the end:

class MyClass {

public:

// some code

private:

int int_data_;

};

The only exception to these rules is when we work with STL (i.e., Standard Template

Library) classes such as std::vector. In this case, we use the naming conventions of

the STL in order to minimize changes to your code if you decide to replace std::

vector with scpp::vector (all classes defined in this book are in the namespace scpp).

Classes such as scpp::array and scpp::matrix follow the same convention as scpp::

vector just because they are containers similar to a vector.

One final remark before we start: all examples of the code in this book were compiled

and tested on a Mac running Max OS X 10.6.8 (Snow Leopard) using the g++ compiler

or XCode. I attempted to avoid anything platform-specific; however, your mileage may

vary. I also made my best effort to ensure that the code of SafeC++ library provided in

the

Appendices is correct, and to the best of my knowledge it does not contain any

bugs. Still, you use it at your own risk. All the C++ code and header files we discuss

are available both at the end of this book in the Appendices, and on the website https:

//github.com/vladimir-kushnir/SafeCPlusPlus

We have here outlined a road map. At the end of the road is better code with fewer

bugs combined with higher programmer productivity and less headache, a shorter de-

velopment cycle, and more proof that the code actually works correctly. Sounds good?

Let’s jump in.

xiv | Preface

Using Code Examples

This book is here to help you get your job done. In general, you may use the code in

this book in your programs and documentation. You do not need to contact us for

permission unless you’re reproducing a significant portion of the code. For example,

writing a program that uses several chunks of code from this book does not require

permission. Selling or distributing a CD-ROM of examples from O’Reilly books does

require permission. Answering a question by citing this book and quoting example

code does not require permission. Incorporating a significant amount of example code

from this book into your product’s documentation does require permission.

We appreciate, but do not require, attribution. An attribution usually includes the title,

author, publisher, and ISBN. For example: “Safe C++ by Vladimir Kushnir. Copyright

2012 Vladimir Kushnir, 978-1-449-32093-5.”

If you feel your use of code examples falls outside fair use or the permission given above,

feel free to contact us at

permissions@oreilly.com.

Safari® Books Online

Safari Books Online (www.safaribooksonline.com) is an on-demand digital

library that delivers expert

content in both book and video form from the

world’s leading authors in technology and business.

Technology professionals, software developers, web designers, and business and cre-

ative professionals use Safari Books Online as their primary resource for research,

problem solving, learning, and certification training.

Safari Books Online offers a range of

product mixes and pricing programs for organi-

zations

, government agencies, and individuals. Subscribers have access to thousands

of books, training videos, and prepublication manuscripts in one fully searchable da-

tabase from publishers like O’Reilly Media, Prentice Hall Professional, Addison-Wesley

Professional, Microsoft Press, Sams, Que, Peachpit Press, Focal Press, Cisco Press, John

Wiley & Sons, Syngress, Morgan Kaufmann, IBM Redbooks, Packt, Adobe Press, FT

Press, Apress, Manning, New Riders, McGraw-Hill, Jones & Bartlett, Course Tech-

nology, and dozens

more. For more information about Safari Books Online, please visit

online.

How to Contact Us

Please address comments and questions concerning this book to the publisher:

O’Reilly Media, Inc.

1005 Gravenstein Highway North

Sebastopol, CA 95472

800-998-9938 (in the United States or Canada)

Preface | xv

剩余139页未读，继续阅读

普通网友

粉丝: 340
资源:
14

Vladimir Kushnir的《Safe C++》：保障安全编程指南

基于C++语言的sfc——Safe C++设计源码详解

FastFormat - Fast, Safe C++ Formatting-开源

Safe C++ - How to avoid common mistakes 无水印pdf

《Safe C++》：提升C++编程安全性的权威指南

Safe interop between Rust and C++.zip

A type safe SQL template library for C++.zip

safe_event:C++ 1114型安全灯事件系统

KeePassXC是Windows应用程序“ Keepass Password Safe”的跨平台社区驱动的端口。-C/C++开发

tinylog:A lightweight C,C++ log component developed for Linux, It is designed with high performance, asynchronized, thread-safe and process-safe; tinylog是一个专为UNIX设计的轻量级的CC++日志模块，其提供了高性能，异步，线程安全，进程安全的日志功能

简单c++

最新资源