DuckStation

BUG OF THE MONTH | Free of Pointer not at Start of Buffer

Bitwarden

BUG OF THE MONTH | Erroneous postfix

Blend2D

BUG OF THE MONTH | An always-false expression

Unity

BUG OF THE MONTH | Assignment to Variable without Use

Barotrauma

BUG OF THE MONTH | Unnecessary actions

Mistakes and suspicious code fragments — or how the static analyzer checked .NET 6

Videos that analyze errors in software projects are an excellent opportunity to practice coding and learn from other people’s mistakes. This time we’ll analyze the .NET 6 source code.

Have fun watching this video and coding 🙂

Ogre3D

BUG OF THE MONTH | Incorrect Calculation

How to make code reliable and secure [The MISRA standard and PVS-Studio]

What is the MISRA standard and what is it for? How to secure your code with the use of MISRA and the PVS-Studio static analyzer? In this video, we tried to briefly answer these and other questions.

Have fun watching this video and coding 🙂

Vulnerabilities due to XML files processing: XXE in C# applications in theory and in practice

How can simple XML files processing turn into a security weakness? How can a blog deployed on your machine cause a data leak? Today we’ll find answers to these questions, learn what XXE is and how it looks like.

An example of undefined behavior caused by absence of return

This article contains a very interesting example. The absence of the return statement in a value-returning function leads to undefined behavior. It’s a perfect example of how wrong code can crash one day, even though it could work for many years.