Writing Bug-Free C Code