source code white-paper

[Geoff Sweet <larryboy2k_(_at_)_attbi_(_dot_)_com>]

I seem to recall some links being posted in the list a while ago on this
subject, however I can't find them.  So I hope my question makes sense:

As I venture more and more into C development on OpenBSD, I find myself
turning to the source as examples of what to do and not do.  I was
wondering if anyone had some really solid references (books,
white-papers, whatever) that talk about what secure coding practices
are, and how to implement them into your code. 

I already ordered: 

The Practice of Programming
        by Brian W. Kernighan and Rob Pike


Advanced Programming in the Unix Environment
        by W. Richard Stevens
        
But is there anything that goes above and beyond to help understand what
is and what isn't "secure".  I can only guess that the OpenBSD
developers know good code from years of practice and experience, however
I am relatively fresh and would like to get my foundation started
right.  ;-)

Thanks
Geoff