2021 | How Not To Code

Tutorial: how to port a project from Interop Word API to Open XML SDK
▻https://hownot2code.com/2021/11/12/tutorial-how-to-port-a-project-from-interop-word-api-to-open-xml-sdk

With the .NET5 release further development of some projects was questionable due to the complexity of porting. One can abandon small outdated libraries or find a replacement. But it’s hard to throw away Microsoft.Office.Interop.Word.dll. Microsoft doesn’t plan to add compatibility with .NET Core/5+, so in this article we focus on creating Word files with Open … Continue reading Tutorial: how to port a project from Interop Word API to Open XML SDK

►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1-11.png?w=450 https://hownot2code.files.wordpress.com/2021/10/image2-7.png?w=300 https://hownot2code.files.wordpress.com/2021/10/image3-7.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image4-6.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image5-6.png?w=491 https://hownot2code.files.wordpress.com/2021/10/image6-4.png?w=176 https://hownot2code.files.wordpress.com/2021/11/image7.png?w=580 https://hownot2code.files.wordpress.com/2021/11/image8.png?w=169

Pentest Insights: Choosing a Tool for #traffic_analysis and Interception
▻https://hownot2code.com/2021/11/11/pentest-insights-choosing-a-tool-for-traffic-analysis-and-interception

GUEST POST Author David Balaban Traffic analysis is a very important stage of penetration testing. In packets transmitted over the network, you can find many interesting things, for example, passwords for accessing various resources and other valuable data. To intercept and analyze traffic, sniffers are used, which humanity has invented a great many. Today I will … Continue reading Pentest Insights: Choosing a Tool for Traffic Analysis and Interception

#Tips_and_tricks #bugs #information_security #safety #security
►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

Using Static Analysis Online [Compiler Explorer]
▻https://hownot2code.com/2021/11/10/using-static-analysis-online-compiler-explorer

Do you want to try a static analyzer but you don’t feel like installing it and figuring the things out? That’s OK 😊 This #Video will tell you how to do it online and most importantly for free. By the way, this website allows you to check if your code compiles 😉 Code from video. … Continue reading Using Static Analysis Online [Compiler Explorer]

#Tips_and_tricks #bugs #coding #CompilerExplorer #development #programming #static_code_analysis #technology #tools #tutorial
►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

Optimization of .NET applications: a big result of small edits
▻https://hownot2code.com/2021/11/08/optimization-of-net-applications-a-big-result-of-small-edits

Today we’re going to discuss how small optimizations in the right places of the application can improve its performance. Imagine: we remove the creation of an extra iterator in one place, get rid of boxing in the other. As a result, we get drastic improvements because of such small edits. One old and simple idea … Continue reading Optimization of .NET applications: a big result of small edits

►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1-10.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image2-6.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image4-5.png?w=484 https://hownot2code.files.wordpress.com/2021/10/image5-5.png?w=562

VSCode: how to view reports of static analyzers that support SARIF
▻https://hownot2code.com/2021/11/05/vscode-how-to-view-reports-of-static-analyzers-that-support-sarif

People increasingly start optimizing the process of finding code errors using static analyzers. Nowadays, we can choose from a variety of products to view analysis results. This post covers the ways how to view an analyzer report in the most stylish and feature-rich IDE among multifunctional ones – VSCode. The SARIF format and a special … Continue reading VSCode: how to view reports of static analyzers that support SARIF

►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1-9.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image2-5.png?w=419 https://hownot2code.files.wordpress.com/2021/10/image3-6.png?w=392 https://hownot2code.files.wordpress.com/2021/10/image4-4.png?w=501 https://hownot2code.files.wordpress.com/2021/10/image5-4.png?w=527 https://hownot2code.files.wordpress.com/2021/10/image6-3.png?w=454 https://hownot2code.files.wordpress.com/2021/10/image7-3.png?w=291 https://hownot2code.files.wordpress.com/2021/10/image8-2.png?w=401 https://hownot2code.files.wordpress.com/2021/10/image9-2.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image11-3.png?w=461 https://hownot2code.files.wordpress.com/2021/10/image12.png?w=564 https://hownot2code.files.wordpress.com/2021/10/image13-1.png?w=562 https://hownot2code.files.wordpress.com/2021/10/image14-1.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image16.png?w=366 https://hownot2code.files.wordpress.com/2021/10/image17.png?w=523 https://hownot2code.files.wordpress.com/2021/10/image18.png?w=390 https://hownot2code.files.wordpress.com/2021/10/image19.png?w=580

Earning Trust in Public #cloud Services
▻https://hownot2code.com/2021/11/04/earning-trust-in-public-cloud-services

GUEST POST Author David Balaban Public cloud Infrastructure should be secured. Who is to ensure it? How to control cloud service providers? What indicates the cloud service is provided by a trusted party? This article reviews the above as well as some other #security concerns. Businesses are opting for the cloud more and more. The ongoing … Continue reading Earning Trust in Public Cloud Services

#Tips_and_tricks #cloud_services #information_security
►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

How to Use Mass Suppression in PVS-Studio for C#?
▻https://hownot2code.com/2021/11/03/how-to-use-mass-suppression-in-pvs-studio-for-c-2

Have you just run the analyzer and now you have no idea what to do with all this abundance of warnings? 📜 Nothing to worry about – we made a special mechanism that can help you deal with them 💪🏻 In this #Video, you’ll learn about the inner workings of mass warnings suppression mechanism in … Continue reading How to Use Mass Suppression in PVS-Studio for C#?

#Bugs_in_C#_projects #Development_in_C# #Tips_and_tricks #bugs #C# #coding #masssuppression #programming #static_code_analysis #tutorial
►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

What’s new in C# 10 : overview
▻https://hownot2code.com/2021/11/02/whats-new-in-c-10-overview

This article covers the new version of the C# language – C# 10. Compared to C# 9, C# 10 includes a short list of enhancements. Below we described the enhancements and added explanatory code fragments. Let’s look at them. Enhancements of structure types Initialization of field structure Now you can set initialization of fields and … Continue reading What’s new in C# 10: overview

►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1-8.png?w=580

A beautiful error in the implementation of the string concatenation function
▻https://hownot2code.com/2021/11/01/a-beautiful-error-in-the-implementation-of-the-string-concatenation-fun

We, the PVS-Studio static code analyzer developers, have a peculiar view on beauty. On the beauty of bugs. We like to find grace in errors, examine them, try to guess how they appeared. Today we have an interesting case when the concepts of length and size got mixed up in the code. LFortran project error … Continue reading A beautiful error in the implementation of the string concatenation function

►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1-2-1.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image3-5.png?w=287

Enums in C# : hidden pitfalls
▻https://hownot2code.com/2021/10/29/enums-in-c-hidden-pitfalls

C# has low barriers to entry and forgives a lot. Seriously, you may not understand how things work under the hood but still write code and remain easy-going about this. Though you still have to deal with different nuances over time. Today, we’ll look at one of such subtle aspects – handling enumerations. Rarely do … Continue reading Enums in C#: hidden pitfalls

►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1-6.png?w=533 https://hownot2code.files.wordpress.com/2021/10/image2-4.png?w=536 https://hownot2code.files.wordpress.com/2021/10/image3-3.png?w=567 https://hownot2code.files.wordpress.com/2021/10/image4-2.png?w=526 https://hownot2code.files.wordpress.com/2021/10/image5-2.png?w=542 https://hownot2code.files.wordpress.com/2021/10/image6-2.png?w=563 https://hownot2code.files.wordpress.com/2021/10/image7-2.png?w=528 https://hownot2code.files.wordpress.com/2021/10/image8-1.png?w=514 https://hownot2code.files.wordpress.com/2021/10/image9-1.png?w=513 https://hownot2code.files.wordpress.com/2021/10/image10-1.png?w=555 https://hownot2code.files.wordpress.com/2021/10/image11-2.png?w=514

Do Not Confuse Web Application #firewall and Next-Generation Firewall
▻https://hownot2code.com/2021/10/28/do-not-confuse-web-application-firewall-and-next-generation-firewall

GUEST POST Author David Balaban Some information security specialists confuse the concepts of #WAF and #ngfw. Moreover, even some representatives of companies manufacturing products positioned as NGFW commit this fault. “We have an NGFW, do we need a WAF?” or “Why do we need WAF?” are very common questions. This calls for figuring out the … Continue reading Do Not Confuse Web Application Firewall and Next-Generation Firewall

#Tips_and_tricks #HTTP #OWASP #OWASP_API
►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

How to Use Mass Suppression in PVS-Studio for #java?
▻https://hownot2code.com/2021/10/27/how-to-use-mass-suppression-in-pvs-studio-for-java

Have you just run the analyzer and now you have no idea what to do with all this abundance of warnings? 📜 Nothing to worry about – we made a special mechanism that can help you deal with them 💪🏻 In this #Video, you’ll learn about the inner workings of mass warnings suppression mechanism in … Continue reading How to Use Mass Suppression in PVS-Studio for Java?

#Tips_and_tricks #bugs #coding #development #masssuppression
►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

How WCF shoots itself in the foot with TraceSource
▻https://hownot2code.com/2021/10/25/how-wcf-shoots-itself-in-the-foot-with-tracesource

We don’t often get the chance to write something on parallel programming issues. This time we “got lucky”. The TraceEvent standard method has some implementation peculiarities. They resulted in an error with multiple threads blocking. So we’d like to warn users about this nuance and cover this interesting case from our users support practice. Why … Continue reading How WCF shoots itself in the foot with TraceSource

►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1-5.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image2-3.png?w=558 https://hownot2code.files.wordpress.com/2021/10/image3-2.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image4-1.png?w=375 https://hownot2code.files.wordpress.com/2021/10/image5-1.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image6-1.png?w=375 https://hownot2code.files.wordpress.com/2021/10/image7-1.png?w=484 https://hownot2code.files.wordpress.com/2021/10/image8.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image10.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image11-1.png?w=372

Why you should check values of public methods’ parameters
▻https://hownot2code.com/2021/10/22/why-you-should-check-values-of-public-methods-parameters

This note will answer the question – why PVS-Studio considers parameters of public methods potential sources of tainted data. The analyzer can issue warnings if such parameters haven’t been checked before use. The point is that undue confidence in external data may lead to various vulnerabilities – SQLI, XSS, path traversal and others. Most obvious … Continue reading Why you should check values of public methods’ parameters

#Tips_and_tricks #C# #coding #Csharp #programming #security #SharpDevelop #static_code_analysis
►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1-4.png?w=580

Detecting errors in the LLVM release 13.0.0
▻https://hownot2code.com/2021/10/21/detecting-errors-in-the-llvm-release-13-0-0

Commercial static analyzers perform deeper and fuller code analysis compared to compilers. Let’s see what PVS-Studio found in the source code of the LLVM 13.0.0 project. How this article appeared Compilers developers constantly improve their products and built-in code analyzers. Some IDEs such as Visual Studio and CLion provide enhanced built-in analyzers. So, developers ask … Continue reading Detecting errors in the LLVM release 13.0.0

►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1-7.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image3-4.png?w=500 https://hownot2code.files.wordpress.com/2021/10/image4-3.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image5-3.png?w=500

How to Use Mass Suppression in PVS-Studio for C++?
▻https://hownot2code.com/2021/10/20/how-to-use-mass-suppression-in-pvs-studio-for-c

Have you just run the analyzer and now you have no idea what to do with all this abundance of warnings? 📜 Nothing to worry about – we made a special mechanism that can help you deal with them 💪🏻 In this #Video, you’ll learn about the inner workings of mass warnings suppression mechanism in … Continue reading How to Use Mass Suppression in PVS-Studio for C++?

#Development_of_64-bit_C/C++_applications #Tips_and_tricks #C++ #coding #cpp #masssuppression #programming #static_code_analysis
►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

Unity projects analysis: the solution file has two projects named “UnityEngine.UI”
▻https://hownot2code.com/2021/10/18/unity-projects-analysis-the-solution-file-has-two-projects-named-unitye

While PVS-Studio analyses a Unity project, one may stumble upon such an error: Error was encountered while trying to open solution file ‘…’: The solution file has two projects named “UnityEngine.UI”. This note discusses the reasons for this error and how to eliminate it. Reasons PVS-Studio uses some third-party libraries, including Roslyn and MSBuild to … Continue reading Unity projects analysis: the solution file has two projects named “UnityEngine.UI”

#Bugs_in_C#_projects #Tips_and_tricks #bugs #C# #coding #Csharp #development #gamedev #programming #SharpDevelop
►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1-2.png?w=524 https://hownot2code.files.wordpress.com/2021/10/image1-3.png?w=524 https://hownot2code.files.wordpress.com/2021/10/image2-2.png?w=550

The ?. operator in foreach will not protect from NullReferenceException
▻https://hownot2code.com/2021/10/15/the-operator-in-foreach-will-not-protect-from-nullreferenceexception

Do you like the ?. operator? Well, who doesn’t? Many people like these concise null checks. However, today’s article shows that the ?. operator may be tricky sometimes. That is, it can create an illusion of safety when used in the foreach loop. Let’s start with a small task. Take a look at the following … Continue reading The ?. operator in foreach will not protect from NullReferenceException

►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1-1.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image2-1.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image3-1.png?w=350

How to NOT Drown in the Static Analyzer’s First Report? [Mass Suppression]
▻https://hownot2code.com/2021/10/13/how-to-not-drown-in-the-static-analyzers-first-report-mass-suppression

Have you ever used a statistical analysis tool on a new large project? If you have, you must know that the first scan may produce over 1 thousand and in some cases over 10 thousand warnings. 📑 Luckily, you can control which warnings you want to work with. For example, you can limit the analysis … Continue reading How to NOT Drown in the Static Analyzer’s First Report? [Mass Suppression] 

#Tips_and_tricks #Video #coding #development #masssuppression #programming #SAST #static_code_analysis #StaticAnalysis
►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

How to speed up building and analyzing of your project with IncrediBuild?
▻https://hownot2code.com/2021/10/11/how-to-speed-up-building-and-analyzing-of-your-project-with-incredibuil

“How much longer are you going to build it?” – a phrase that every developer has uttered at least once in the middle of the night. Yes, a build can be long and there is no escaping it. One does not simply redistribute the whole thing among 100+ cores, instead of some pathetic 8-12 ones. … Continue reading How to speed up building and analyzing of your project with IncrediBuild?

►https://1.gravatar.com/avatar/a7fa0bb4ebff5650d2c83cb2596ad2aa?s=96&d=identicon&r=G

https://hownot2code.files.wordpress.com/2021/10/image1.png?w=580 https://hownot2code.files.wordpress.com/2021/10/image2.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image3.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image4.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image5.png?w=358 https://hownot2code.files.wordpress.com/2021/10/image6.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image7.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image9.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image11.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image13.png?w=560 https://hownot2code.files.wordpress.com/2021/10/image14.png?w=560