Home » Blog » Categories »

CWE Top 25 2022. Review of changes

By Andrey Karpov | Jul 20, 2022 10:43 AM | Tags: sast devsecops cwetop25 cwe25 cwe

The CWE Top 25 list reflects the most serious software security weaknesses. I invite you to read the updated top list to become aware of the changes happened over the past year.

CWE Top 25 2022. Review of changes

by Mikhail Gelvih

From the article:

Below is a table of correspondence between the CWE Top 25 2022 list and the PVS-Studio diagnostic rules, divided by programming languages. You can always check the most up-to-date table with CWE Top 25 coverage on our website.

An experimental successor to C++

By Jordi Mon Companys | Jul 20, 2022 01:14 AM | Tags: experimental

An experimental successor to C++
 

About Carbon:

C++ remains the dominant programming language for performance-critical software, with massive and growing codebases and investments. However, it is struggling to improve and meet developers' needs outlined above, in no small part due to accumulating decades of technical debt. Incrementally improving C++ is extremely difficult, both due to the technical debt itself and challenges with its evolution process. The best way to address these problems is to avoid inheriting the legacy of C or C++ directly, and instead start with solid language foundations like a modern generics system, modular code organization, and consistent, simple syntax.

CppCon 2022 opening keynote: Bjarne Stroustrup, live in person

By Blog Staff | Jul 19, 2022 09:23 AM | Tags: None

bjarne-s-300x271.jpgCppCon 2022 will kick off on Monday, September 11 with Bjarne Stroustrup delivering the traditional opening keynote live in person in Aurora. Bjarne’s annual opening keynote for CppCon is one of the most anticipated and most watch talks in C++, and among the most viewed presentations on the CppCon YouTube Channel. Registration is open attend in person to be in the room for this keynote, to watch and submit questions live online, or do both...

Opening 2022 Keynote: C++ in Constrained Environments

Bjarne Stroustrup, live in person

C++ is widely used in constrained and/or critical applications and infrastructure components. How do we manage to use a large multi-purpose language in such environments? How can we better use facilities and techniques from modern C++ (C++11, C++14, C++17, C++20, and beyond)? The best answer is not “use only facilities available in C and C++ in 1985.”

This talk focuses on a top-down approach to achieve simplicity, maintainability, performance, and various forms of safety. It touches upon the C++ Core Guidelines, compile-time computation, type-and-resource safety, type deduction, the span and chrono standard libraries, and error handling.

Every year, Bjarne Stroustrup gives an important C++ talk in his CppCon opening keynote. Be at CppCon again this year, on-site or on-line, as Bjarne Stroustrup flies us above this complex landscape of issues and shines a spotlight on the most important things to know, and to think about, in C++ in 2022. This year we aim to leave extra extended time for real-time questions and answers with the live audience. Come to the talk, bring your questions, and don’t miss out!

Registration is now open for both online and in-person attendees so don’t miss out on CppCon 2022 this September 11-16. Register today!

CppCon 2022 opening keynote: Bjarne Stroustrup, live in person

By Blog Staff | Jul 19, 2022 09:23 AM | Tags: None

bjarne-s-300x271.jpgCppCon 2022 will kick off on Monday, September 11 with Bjarne Stroustrup delivering the traditional opening keynote live in person in Aurora. Bjarne’s annual opening keynote for CppCon is one of the most anticipated and most watch talks in C++, and among the most viewed presentations on the CppCon YouTube Channel. Registration is open attend in person to be in the room for this keynote, to watch and submit questions live online, or do both...

Opening 2022 Keynote: C++ in Constrained Environments

Bjarne Stroustrup, live in person

C++ is widely used in constrained and/or critical applications and infrastructure components. How do we manage to use a large multi-purpose language in such environments? How can we better use facilities and techniques from modern C++ (C++11, C++14, C++17, C++20, and beyond)? The best answer is not “use only facilities available in C and C++ in 1985.”

This talk focuses on a top-down approach to achieve simplicity, maintainability, performance, and various forms of safety. It touches upon the C++ Core Guidelines, compile-time computation, type-and-resource safety, type deduction, the span and chrono standard libraries, and error handling.

Every year, Bjarne Stroustrup gives an important C++ talk in his CppCon opening keynote. Be at CppCon again this year, on-site or on-line, as Bjarne Stroustrup flies us above this complex landscape of issues and shines a spotlight on the most important things to know, and to think about, in C++ in 2022. This year we aim to leave extra extended time for real-time questions and answers with the live audience. Come to the talk, bring your questions, and don’t miss out!

Registration is now open for both online and in-person attendees so don’t miss out on CppCon 2022 this September 11-16. Register today!

Configuration, Extension, Maintainability - Titus Winters - CppCon 2021

By Adrien Hamelin | Jul 18, 2022 08:57 AM | Tags: None

Registration is now open for CppCon 2022, which starts on September 11 and will again be held both in person and online. To whet your appetite for this year’s conference, we’re posting videos of some of the top-rated talks from last year’s conference. Here’s another CppCon talk video we hope you will enjoy – and why not register today for CppCon 2022 to attend in person, online, or both!

Configuration, Extension, Maintainability

by Titus Winters

Summary of the video:

Configurability should be considered a potential design smell, especially for systems and interfaces that will be in use for a long time. As an unfortunate result, “No, please don’t add that feature” must be a viable response to design proposals - just because a change can be made doesn’t mean it should. This is particularly challenging to square with a customer-focused product mindset: it’s hard to balance between long-term needs and immediate “the customer is always right.”

Providing options and toggles to configure settings gives users more freedom, but those settings become stale and brittle almost immediately, and regularly wind up pessimizing overall efficiency results. This is particularly true of rarely-used forms of extensibility and configuration. Of course, whatever sort of optionality and customization you provide will be hard to ever undo, because of Hyrum’s Law.

At the root of it, there is a fundamental tension between customization, extensibility, configuration vs. centralization, efficiency, and evolvability, and this tension needs to be considered when you are evaluating whether to add new customization and extensibility options. This talk will address some of the basic ways that design and invariants interact with long-term maintenance and optimization, and some heuristics for deciding whether adding a knob will turn out to be a mistake.

C++20 Ranges Algorithms - sorting, sets, other and C++23 updates--Bartlomiej Filipek

By Adrien Hamelin | Jul 18, 2022 08:54 AM | Tags: c++20

The series continue.

C++20 Ranges Algorithms - sorting, sets, other and C++23 updates

by Bartlomiej Filipek

From the article:

This article is the third and the last one in the mini-series about ranges algorithms. We’ll look at some sorting, searching, and remaining algorithms. We’ll also have a glimpse of cool C++23 improvements in this area.

Let’s go...

Law of Demeter: A Practical Guide to Loose Coupling - Kris Jusiak - CppCon 2021

By Adrien Hamelin | Jul 15, 2022 10:57 AM | Tags: None

Registration is now open for CppCon 2022, which starts on September 11 and will again be held both in person and online. To whet your appetite for this year’s conference, we’re posting videos of some of the top-rated talks from last year’s conference. Here’s another CppCon talk video we hope you will enjoy – and why not register today for CppCon 2022 to attend in person, online, or both!

Law of Demeter: A Practical Guide to Loose Coupling

by Kris Jusiak

Summary of the video:

In this practical session, we will go through examples that follow and/or violate the Law of Demeter principle (LoD) [1].

We will take a deep dive into what kind of design issues that exposes and how to fix them.
Additionally, we will focus on the testing aspect of following the LoD principle together with Single Responsibility and Dependency Inversion principles.

At the end of this session, the audience will have a better understanding of how to write a loosely coupled code, how to easily test it and why the Law of Demeter principle is so important in Software Design.

Let's !"only talk to our immediate friends" at CppCon-2021!

vcpkg June 2022 Release is Now Available: Force Download vcpkg Dependencies...--Augustin Popa

By Adrien Hamelin | Jul 15, 2022 10:55 AM | Tags: community

Are you using it?

vcpkg June 2022 Release is Now Available: Force Download vcpkg Dependencies, Documentation Changes, and More

by Augustin Popa

From the article:

The June 2022 release of the vcpkg package manager is available. This includes a hotfix that fixed a regression in the binary caching experience. This blog post summarizes changes from May 11th, 2022 to June 15th, 2022 for the microsoft/vcpkg and microsoft/vcpkg-tool GitHub repos...