Cursor rule

1---
2paths:
3  - "**/*.cpp"
4  - "**/*.hpp"
5  - "**/*.cc"
6  - "**/*.hh"
7  - "**/*.cxx"
8  - "**/*.h"
9  - "**/CMakeLists.txt"
10---
11# C++ Security
12 
13> This file extends [common/security.md](../common/security.md) with C++ specific content.
14 
15## Memory Safety
16 
17- Never use raw `new`/`delete` — use smart pointers
18- Never use C-style arrays — use `std::array` or `std::vector`
19- Never use `malloc`/`free` — use C++ allocation
20- Avoid `reinterpret_cast` unless absolutely necessary
21 
22## Buffer Overflows
23 
24- Use `std::string` over `char*`
25- Use `.at()` for bounds-checked access when safety matters
26- Never use `strcpy`, `strcat`, `sprintf` — use `std::string` or `fmt::format`
27 
28## Undefined Behavior
29 
30- Always initialize variables
31- Avoid signed integer overflow
32- Never dereference null or dangling pointers
33- Use sanitizers in CI:
34```bash
35  cmake -DCMAKE_CXX_FLAGS="-fsanitize=address,undefined" ..
36```
37 
38## Static Analysis
39 
40- Use **clang-tidy** for automated checks:
41```bash
42  clang-tidy --checks='*' src/*.cpp
43```
44- Use **cppcheck** for additional analysis:
45```bash
46  cppcheck --enable=all src/
47```
48 
49## Reference
50 
51See skill: `cpp-coding-standards` for detailed security guidelines.
52