Page History

The managed string library described in \[[Burch 06|AA. C References#Burch06]\] was developed in response to the need for a string library that could improve the quality and security of newly developed C language code while eliminating obstacles to widespread adoption and possible standardization.

Note that the calls to {{fprintf()}} and {{printf()}} are C99 \[[ISO/IEC 9899:1999|AA. C References#ISO/IEC 9899-1999]\] standard functions and not managed string functions.

String handling functions defined in C99 \[[ISO/IEC 9899:1999|AA. C References#ISO/IEC 9899-1999]\] Section 7.21 and elsewhere are susceptible to common programming errors that can lead to serious, exploitable [vulnerabilities|BB. Definitions#vulnerability]. Managed strings, when used properly, can eliminate many of these errors, particularly in new development.

\[[Burch 06|AA. C References#Burch06]\]
\[[CERT 06c|AA. C References#CERT 06c]\]
\[[ISO/IEC 9899:1999|AA. C References#ISO/IEC 9899-1999]\] Section 7.21, "String handling <{{string.h}}>"
\[[Seacord 05a|AA. C References#Seacord 05a]\] Chapter 2, "Strings"