Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Technical Report

Specifications for Managed Strings

  • May 2006
  • By Hal Burch, Fred Long, Robert C. Seacord
  • This report has been superseded by Specifications for Managed Strings, Second Edition (CMU/SEI-2010-TR-018).
  • Secure Coding
  • Publisher: Software Engineering Institute
    CMU/SEI Report Number: CMU/SEI-2006-TR-006
  • Abstract

    This report describes a managed string library for the C programming language. Many software vulnerabilities in C programs result from the misuse of standard C string manipulation functions. Programming errors common to string manipulation logic include buffer overflow, truncation errors, string termination errors, and improper data sanitation. The managed string library provides mechanisms to eliminate or mitigate these problems and improve system security. A proof-of-concept implementation of the managed string library is available from the Secure Coding area of the CERT Web site.

    This report has been superseded by Specifications for Managed Strings, Second Edition (CMU/SEI-2010-TR-018).

  • Download

Cite This Report

SEI

Burch, Hal; Long, Fred; & Seacord, Robert. Specifications for Managed Strings. CMU/SEI-2006-TR-006. Software Engineering Institute, Carnegie Mellon University. 2006. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8083

IEEE

Burch. Hal, Long. Fred, and Seacord. Robert, "Specifications for Managed Strings," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2006-TR-006, 2006. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8083

APA

Burch, Hal., Long, Fred., & Seacord, Robert. (2006). Specifications for Managed Strings (CMU/SEI-2006-TR-006). Retrieved March 28, 2017, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8083

CHI

Hal Burch, Fred Long, & Robert Seacord. Specifications for Managed Strings (CMU/SEI-2006-TR-006). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2006. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8083

MLA

Burch, Hal., Long, Fred., & Seacord, Robert. 2006. Specifications for Managed Strings (Technical Report CMU/SEI-2006-TR-006). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8083

BibTex

@techreport{BurchSpecificationsfor2006,
title={Specifications for Managed Strings},
author={Hal Burch and Fred Long and Robert Seacord},
year={2006},
number={CMU/SEI-2006-TR-006},
institution={Software Engineering Institute, Carnegie Mellon University},
address={Pittsburgh, PA},
url={http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8083} }