Advanced Search

Content Type

Topics

Publication Date

Specifications for Managed Strings, Second Edition

Abstract

This report describes a managed string library for the C programming language. Many software vulnerabilities in C programs result from the misuse of manipulation functions for standard C strings. Programming errors common to string-manipulation logic include buffer overflow, truncation errors, string termination errors, and improper data sanitization. The managed string library provides mechanisms to eliminate or mitigate these problems and improve system security. The CERT Program, which is part of the Carnegie Mellon Software Engineering Institute, provides a proof-of-concept implementation of the managed string library on its Secure Coding web pages.

Cite This Report

Show Citation Formats

SEI

Burch, Hal; Long, Fred; Rungta, Raunak; Seacord, Robert; & Svoboda, David. Specifications for Managed Strings, Second Edition (CMU/SEI-2010-TR-018). Software Engineering Institute, Carnegie Mellon University, 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9531

IEEE

Burch. Hal, Long. Fred, Rungta. Raunak, Seacord. Robert, and Svoboda. David, "Specifications for Managed Strings, Second Edition," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2010-TR-018, 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9531

APA

Burch, Hal., Long, Fred., Rungta, Raunak., Seacord, Robert., & Svoboda, David. (2010). Specifications for Managed Strings, Second Edition (CMU/SEI-2010-TR-018). Retrieved July 31, 2014, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9531

CHI

Hal Burch, Fred Long, Raunak Rungta, Robert Seacord, & David Svoboda. Specifications for Managed Strings, Second Edition (CMU/SEI-2010-TR-018). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9531

MLA

Burch, Hal., Long, Fred., Rungta, Raunak., Seacord, Robert., & Svoboda, David. 2010. Specifications for Managed Strings, Second Edition (Technical Report CMU/SEI-2010-TR-018). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9531