mirror of
https://github.com/affaan-m/everything-claude-code.git
synced 2026-03-31 06:03:29 +08:00
- agents: cpp-build-resolver, cpp-reviewer - commands: cpp-build, cpp-review, cpp-test - rules: cpp/ (coding-style, hooks, patterns, security, testing) - tests: 9 new hook test files with comprehensive coverage Cherry-picked from PR #436.
1.2 KiB
1.2 KiB
paths
| paths | |||||||
|---|---|---|---|---|---|---|---|
|
C++ Security
This file extends common/security.md with C++ specific content.
Memory Safety
- Never use raw
new/delete— use smart pointers - Never use C-style arrays — use
std::arrayorstd::vector - Never use
malloc/free— use C++ allocation - Avoid
reinterpret_castunless absolutely necessary
Buffer Overflows
- Use
std::stringoverchar* - Use
.at()for bounds-checked access when safety matters - Never use
strcpy,strcat,sprintf— usestd::stringorfmt::format
Undefined Behavior
- Always initialize variables
- Avoid signed integer overflow
- Never dereference null or dangling pointers
- Use sanitizers in CI:
cmake -DCMAKE_CXX_FLAGS="-fsanitize=address,undefined" ..
Static Analysis
- Use clang-tidy for automated checks:
clang-tidy --checks='*' src/*.cpp - Use cppcheck for additional analysis:
cppcheck --enable=all src/
Reference
See skill: cpp-coding-standards for detailed security guidelines.