affaan-m--ecc/rules/cpp/security.md

paths

paths
**/*.cpp **/*.hpp **/*.cc **/*.hh **/*.cxx **/*.h **/CMakeLists.txt

C++ Security

This file extends common/security.md with C++ specific content.

Memory Safety

• Never use raw new/delete — use smart pointers
• Never use C-style arrays — use std::array or std::vector
• Never use malloc/free — use C++ allocation
• Avoid reinterpret_cast unless absolutely necessary

Buffer Overflows

• Use std::string over char*
• Use .at() for bounds-checked access when safety matters
• Never use strcpy, strcat, sprintf — use std::string or fmt::format

Undefined Behavior

• Always initialize variables
• Avoid signed integer overflow
• Never dereference null or dangling pointers
• Use sanitizers in CI:

  cmake -DCMAKE_CXX_FLAGS="-fsanitize=address,undefined" ..
  

Static Analysis

• Use clang-tidy for automated checks:

  clang-tidy --checks='*' src/*.cpp
  

• Use cppcheck for additional analysis:

  cppcheck --enable=all src/
  

Reference

See skill: cpp-coding-standards for detailed security guidelines.