Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="99a62636e5fc7cc0-b97ed884-496f40d3-ba608516-d55eedf3039a169ba811cb1d"><ac:parameter ac:name="">Burch 06</ac:parameter></ac:structured-macro>
\[Burch 06\] Hal Burch, Fred Long, Robert Seacord.  Specifications for Managed Strings. May 2006.  CMU/SEI-2006-TR-006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="93e4ed26dd783703-21ab5a77-4e9c491a-8aca8fc2-4db40963176ca1615b919418"><ac:parameter ac:name="">CERT 06</ac:parameter></ac:structured-macro>
\[CERT 06\] CERT. [Managed String Library|http://www.cert.org/secure-coding/managedstring.html] (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2b3fa1b26d7f6cde-c7f9bfdb-481c4a37-99df85c0-f9d109de48a83f70d1bfff87"><ac:parameter ac:name="">Graf 03</ac:parameter></ac:structured-macro>
\[Graf 03\] Secure Coding: Principles and Practices. O'Reilly, July 2003. ISBN 0596002424.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2db698612cb9af83-291b91a5-48bb4b6d-95edbf68-533f99d9139afcd9e88059d5"><ac:parameter ac:name="">Haddad 05</ac:parameter></ac:structured-macro>
\[Haddad 05\] Haddad, Ibrahim. "Secure Coding in C and C++: An interview with Robert Seacord, senior vulnerability analyst at CERT." _Linux World Magazine_, November, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="10b7827c46d3fbe8-cc0ff578-49324edc-af799307-888f083d5a90ce94aae3fe11"><ac:parameter ac:name="">Hatton 94</ac:parameter></ac:structured-macro>
\[Hatton 04\] Safer C: Developing Software for High-integrity and Safety-critical Systems. McGraw-Hill Book Company. ISBN 0-07-707640-0.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8a4d23a7-8852-4c52-b6f8-3acebcea6379"><ac:parameter ac:name="">ilja 06</ac:parameter></ac:structured-macro>
\[ilja 06\] ilja. "[readlink abuse|http://blogs.23.nu/ilja/stories/12551/]." _ilja's blog_, August 13, 2006. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5ceaa9f7cf6dd8a8-003dc1b5-49e244c6-aebd9fcf-bbb10141c564edbab1c02697"><ac:parameter ac:name="">ISO/IEC TR 24731-2006</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24731-2006\] ISO/IEC TR 24731. Extensions to the C Library, --- Part I: Bounds-checking interfaces. April, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="da54cfd49773f78e-4b44f31d-44e5437e-8542b1de-fe7dbf7254fb84ade86bd8ad"><ac:parameter ac:name="">Kerrighan 88</ac:parameter></ac:structured-macro>
\[Kerrighan 88\] Kerrighan B. W., and D. M. Ritchie. The C Programming Language. 2nd ed. Englewood Cliffs, NJ: Prentice-Hall, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fc5b393f346cebdd-3f474625-4ee04472-9fceb504-1d215a541d9d3925deae2291"><ac:parameter ac:name="">Klein 02</ac:parameter></ac:structured-macro>
\[Klein 02\] Klein, Jack. _Bullet Proof Integer Input Using strtol()_. [http://home.att.net/~jackklein/c/code/strtol.html] (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d4ee5737a164f851-64d15153-47f64704-9281ad1f-041d7d7bd653a8d9661c0afd"><ac:parameter ac:name="">mercy</ac:parameter></ac:structured-macro>
\[mercy\] mercy. _Exploiting Uninitialized Data_. [http://www.felinemenace.org/papers/UBehavior.zip] (January 2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c9b84fc068472d1e-f507e42d-4afc428f-a69ba28b-e4da7cc03bfe6920c6b0cdc0"><ac:parameter ac:name="">MISRA 04</ac:parameter></ac:structured-macro>
\[MISRA 04\] MISRA C: 2004 Guidelines for the use of the C language in critical systems. MIRA Limited. Warwickshire, UK. October 2004. ISBN 0 9524156 4

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b3feacdc00eda1a4-00114dee-43f4471d-ab0caee4-9743d0482bf4e7a122de8d34"><ac:parameter ac:name="">NASA-GB-1740.13</ac:parameter></ac:structured-macro>
\[NASA-GB-1740.13\] NASA-GB-1740.13. NASA Guidebook for Safety Critical Software Analysis and Development. [http://pbma.nasa.gov/docs/public/pbma/general/guidbook.doc]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a25521cde751d3bb-5d865ed4-40744111-974685e6-14051b4158362c8104ad8d25"><ac:parameter ac:name="">NIST 06</ac:parameter></ac:structured-macro>
\[NIST 06\] NIST. SAMATE Reference Dataset (SRD).See [http://samate.nist.gov/SRD/srdFiles/]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e9a10cad-626b-4930-842f-de57b08b634b"><ac:parameter ac:name="">Open Group 04</ac:parameter></ac:structured-macro>
\[Open Group 04\] The Open Group. _[The Open Group Base Specifications Issue 6|http://www.opengroup.org/onlinepubs/000095399/functions/readlink.html], IEEE Std 1003.1, 2004 Edition_ (2004). 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1588db1c22317a46-1f9c67c3-4e694765-9e1f9904-7321e14cae51d329b6d71ef7"><ac:parameter ac:name="">Plum 91</ac:parameter></ac:structured-macro>
\[Plum 91\] Thomas Plum, Dan Saks. C+\+ Programming Guidelines. Plum Hall (November 1991). ISBN: 0911537104

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="abb408bb2304f088-83cb60f5-474b4a96-8d2ca897-a9f06016035bf095aa2b6315"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro> <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c6d95ef4299fcf57-eca2374a-45b6438c-ab13ad87-69445a557d476f32c46325ea"><ac:parameter ac:name="">Seacord 05a</ac:parameter></ac:structured-macro>
\[Seacord 05a\] Seacord, R. Secure Coding in C and C++. Addison-Wesley, 2005. See [http://www.cert.org/books/secure-coding] for news and errata.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="898c4ae301488255-39e4849b-4f37498a-b020a668-99342c7a89baa9bd6d47f403"><ac:parameter ac:name="">Seacord 05b</ac:parameter></ac:structured-macro>
\[Seacord 05b\] Seacord, R. Managed String Library for C. C/C+\+ Users Journal. Vol. 23, No. 10. Pages 30-34. October 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="19c6bd90c597dab1-d2a67ee3-4fa34d33-8ae48ad8-25eafdc2aa9c159695c9674c"><ac:parameter ac:name="">Summit 95</ac:parameter></ac:structured-macro>
\[Summit 95\] Summit, Steve. _C Programming FAQs: Frequently Asked Questions_. Boston, MA: Addison-Wesley, 1995 (ISBN 0201845199).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="018926ba2189936b-67ac2aec-4810435c-960ca9a1-3dadd19ee11c527a76890570"><ac:parameter ac:name="">Summit 05</ac:parameter></ac:structured-macro>
\[Summit 05\] Summit, Steve. _comp.lang.c Frequently Asked Questions_. [http://c-faq.com/] (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="35d6909e3a183c58-558592c1-406946c8-9634b1ca-4f7d0723e2f985320e61fe1d"><ac:parameter ac:name="">Viega 03</ac:parameter></ac:structured-macro>
\[Viega 03\] Viega, John & Messier, Matt. _Secure Programming Cookbook for C and C++: Recipes for Cryptography, Authentication, Networking, Input Validation & More_. Sebastopol, CA: O'Reilly, 2003 (ISBN 0-596-00394-3).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="24dbfeb1b813ae9e-79395b4b-452d4bb0-b6868875-1d0de006a6d7b7e593d516e1"><ac:parameter ac:name="">Warren 02</ac:parameter></ac:structured-macro>
\[Warren 02\] Henry S. Warren. Hacker's Delight. Addison Wesley Professional. July, 2002. ISBN: 0201914654.