Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4dee0e18f3c73ed4-bfbe48a7-46d74529-9f0a8edb-cdaaba9112e5eed755165536"><ac:parameter ac:name="">Burch 06</ac:parameter></ac:structured-macro>
\[Burch 06\] Hal Burch, Fred Long, Robert Seacord.  Specifications for Managed Strings. May 2006.  CMU/SEI-2006-TR-006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9c3a404a0ed39783-f3d5b115-4cb74ca3-af84ae3a-6959543bf0e00ad940f83818"><ac:parameter ac:name="">CERT 06</ac:parameter></ac:structured-macro>
\[CERT 06\] CERT. [Managed String Library|http://www.cert.org/secure-coding/managedstring.html] (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b4ac90ad49a24e64-bdd7534d-45554b05-9d89b320-18f546cf80d9fd26cf4a5dcc"><ac:parameter ac:name="">Graf 03</ac:parameter></ac:structured-macro>
\[Graf 03\] Secure Coding: Principles and Practices. O'Reilly, July 2003. ISBN 0596002424.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b856630daba9f494-6bb99997-46ff4a07-8350a550-15860442a041704613e17ba6"><ac:parameter ac:name="">Haddad 05</ac:parameter></ac:structured-macro>
\[Haddad 05\] Haddad, Ibrahim. "Secure Coding in C and C++: An interview with Robert Seacord, senior vulnerability analyst at CERT." _Linux World Magazine_, November, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="68ec8f87f9c82bca-197abde1-42d54e9b-bcb1806e-6081849b75c73bb3bc130ac9"><ac:parameter ac:name="">Hatton 94</ac:parameter></ac:structured-macro>
\[Hatton 04\] Safer C: Developing Software for High-integrity and Safety-critical Systems. McGraw-Hill Book Company. ISBN 0-07-707640-0.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="29f4475da2260803-7777c720-423248a5-8b958e84-7323d39b17af58c32558ec1a"><ac:parameter ac:name="">ilja 06</ac:parameter></ac:structured-macro>
\[ilja 06\] ilja. "[readlink abuse|http://blogs.23.nu/ilja/stories/12551/]." _ilja's blog_, August 13, 2006. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5f2b7f1589692c10-34244bcc-40ab46ec-a8b6b3c6-15951c15faa5cd9e3320543d"><ac:parameter ac:name="">ISO/IEC 9899-1999</ac:parameter></ac:structured-macro>
\[ISO/IEC 9899-1999\] ISO/IEC 9899-1999. Programming Languages --- C, Second Edition, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cdbe5248946412c7-dba79377-4f5843e1-97419df2-f76d13596df35203ab80bb8b"><ac:parameter ac:name="">ISO/IEC TR 24731-2006</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24731-2006\] ISO/IEC TR 24731. Extensions to the C Library, --- Part I: Bounds-checking interfaces. April, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6db4b03469b0b31f-52663024-49964d51-ad8fbc19-cc1b2d876a7feff231ae0a66"><ac:parameter ac:name="">Kerrighan 88</ac:parameter></ac:structured-macro>
\[Kerrighan 88\] Kerrighan B. W., and D. M. Ritchie. The C Programming Language. 2nd ed. Englewood Cliffs, NJ: Prentice-Hall, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5c16120c7d9ec9db-9aa14c7b-4a73453e-a69bb22b-1a2654f3fd51c3768099eb83"><ac:parameter ac:name="">Klein 02</ac:parameter></ac:structured-macro>
\[Klein 02\] Klein, Jack. _Bullet Proof Integer Input Using strtol()_. [http://home.att.net/~jackklein/c/code/strtol.html] (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="21f1ab2034baeb6a-5ff68cc8-48b844d7-b31f9f29-d1e77750f207476cc4143748"><ac:parameter ac:name="">mercy</ac:parameter></ac:structured-macro>
\[mercy\] mercy. _Exploiting Uninitialized Data_. [http://www.felinemenace.org/papers/UBehavior.zip] (January 2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0e0e51df84feabfa-a399503e-42ce4b53-bc629aea-85d6559bab57244caf1be0da"><ac:parameter ac:name="">MISRA 04</ac:parameter></ac:structured-macro>
\[MISRA 04\] MISRA C: 2004 Guidelines for the use of the C language in critical systems. MIRA Limited. Warwickshire, UK. October 2004. ISBN 0 9524156 4

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6df048af6c3f6fa4-89ffb5d4-4a614498-ada39a67-413b6792577ad01336cd6626"><ac:parameter ac:name="">NASA-GB-1740.13</ac:parameter></ac:structured-macro>
\[NASA-GB-1740.13\] NASA-GB-1740.13. NASA Guidebook for Safety Critical Software Analysis and Development. [http://pbma.nasa.gov/docs/public/pbma/general/guidbook.doc]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b5dac40b7aec705f-8871b08d-425e499f-97db9217-49aa92c015ab0b7cd577cf4b"><ac:parameter ac:name="">NIST 06</ac:parameter></ac:structured-macro>
\[NIST 06\] NIST. SAMATE Reference Dataset (SRD).See [http://samate.nist.gov/SRD/srdFiles/]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a2ee54189ae4f856-fc932f99-425a40a5-a89283cc-77e71703aea2f965490179b9"><ac:parameter ac:name="">Open Group 97</ac:parameter></ac:structured-macro>
\[Open Group 97\] The Open Group. _[_The Single UNIX ® Specification, Version 2_|http://www.opengroup.org/pubs/online/7908799/xsh/readlink.html]_ (1997).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="77090e55d19c25d9-0d902d0b-4c32465c-b62697ac-a5e4b0728b9b9c35f5af40b7"><ac:parameter ac:name="">Open Group 04<04a</ac:parameter></ac:structured-macro>
\[Open Group 0404a\] The Open Group. _[The Open Group Base Specifications Issue 6"[readlink|http://www.opengroup.org/onlinepubs/000095399/functions/readlink.html]." _The Open Group Base Specifications Issue 6, IEEE Std 1003.1, 2004 Edition_ (2004). 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e55e18a91d7017d8-36ccf993-48334cc0-bd8db26d-77b0f38c8e51e40f57d062f4"><ac:parameter ac:name="">Plum 89</ac:parameter></ac:structured-macro>
\[Plum 89\] Plum, Thomas. C Programming Guidelines. Plum Hall; 2nd edition (June 1989). ISBN: 0911537074.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5e3aec1e259aabc2-1c6e9822-4f5f4316-912fa014-0b343ce7b9d2c023732de280"><ac:parameter ac:name="">Plum 91</ac:parameter></ac:structured-macro>
\[Plum 91\] Thomas Plum, Dan Saks. C+\+ Programming Guidelines. Plum Hall (November 1991). ISBN: 0911537104

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2fb99c533325586a-4bdba7e6-47ad48ab-9347bcf0-ce4b59a69dc4141418c87834"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro> <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6bd87ae47d30c041-e6018e4e-47d74abc-a5ca9a3b-9e81c1150a29c3d013073c8a"><ac:parameter ac:name="">Seacord 05a</ac:parameter></ac:structured-macro>
\[Seacord 05a\] Seacord, R. Secure Coding in C and C++. Addison-Wesley, 2005. See [http://www.cert.org/books/secure-coding] for news and errata.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d8b4b80fbfff42bd-3fcb0168-496c4d8b-af3ea931-36e9acf15482856461de4333"><ac:parameter ac:name="">Seacord 05b</ac:parameter></ac:structured-macro>
\[Seacord 05b\] Seacord, R. Managed String Library for C. C/C+\+ Users Journal. Vol. 23, No. 10. Pages 30-34. October 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bc873356b571e86a-d2ba3b5c-41274421-b57f94a7-e0b6b8ec1b4917c30ebcc629"><ac:parameter ac:name="">Summit 95</ac:parameter></ac:structured-macro>
\[Summit 95\] Summit, Steve. _C Programming FAQs: Frequently Asked Questions_. Boston, MA: Addison-Wesley, 1995 (ISBN 0201845199).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="106532d86a5cb2ef-31294294-464b47f4-944ebf31-cdc61f3ba77b9b35799da72e"><ac:parameter ac:name="">Summit 05</ac:parameter></ac:structured-macro>
\[Summit 05\] Summit, Steve. _comp.lang.c Frequently Asked Questions_. [http://c-faq.com/] (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d4e04222631f6766-441c2e47-4d89437b-8566be28-cf9129c956adee5f92c12a72"><ac:parameter ac:name="">Viega 03</ac:parameter></ac:structured-macro>
\[Viega 03\] Viega, John & Messier, Matt. _Secure Programming Cookbook for C and C++: Recipes for Cryptography, Authentication, Networking, Input Validation & More_. Sebastopol, CA: O'Reilly, 2003 (ISBN 0-596-00394-3).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b4856c48df731437-b065cb86-40894f49-b6bc9ddd-0ef1ade703ff489ae6d2c232"><ac:parameter ac:name="">Warren 02</ac:parameter></ac:structured-macro>
\[Warren 02\] Henry S. Warren. Hacker's Delight. Addison Wesley Professional. July, 2002. ISBN: 0201914654.