Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Technical Report

Specifications for Managed Strings, Second Edition

  • Abstract

    This report describes a managed string library for the C programming language. Many software vulnerabilities in C programs result from the misuse of manipulation functions for standard C strings. Programming errors common to string-manipulation logic include buffer overflow, truncation errors, string termination errors, and improper data sanitization. The managed string library provides mechanisms to eliminate or mitigate these problems and improve system security. The CERT Program, which is part of the Carnegie Mellon Software Engineering Institute, provides a proof-of-concept implementation of the managed string library on its Secure Coding web pages.

  • Download

Cite This Report

SEI

Burch, Hal; Long, Fred; Rungta, Raunak; Seacord, Robert; & Svoboda, David. Specifications for Managed Strings, Second Edition (CMU/SEI-2010-TR-018). Software Engineering Institute, Carnegie Mellon University, 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9531

IEEE

Burch. Hal, Long. Fred, Rungta. Raunak, Seacord. Robert, and Svoboda. David, "Specifications for Managed Strings, Second Edition," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2010-TR-018, 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9531

APA

Burch, Hal., Long, Fred., Rungta, Raunak., Seacord, Robert., & Svoboda, David. (2010). Specifications for Managed Strings, Second Edition (CMU/SEI-2010-TR-018). Retrieved December 25, 2014, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9531

CHI

Hal Burch, Fred Long, Raunak Rungta, Robert Seacord, & David Svoboda. Specifications for Managed Strings, Second Edition (CMU/SEI-2010-TR-018). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9531

MLA

Burch, Hal., Long, Fred., Rungta, Raunak., Seacord, Robert., & Svoboda, David. 2010. Specifications for Managed Strings, Second Edition (Technical Report CMU/SEI-2010-TR-018). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9531