...
This rule appears in the C++ Secure Coding Standard as ENV01-CPP. Do not make assumptions about the size of an environment variable.
...
Bibliography
| Wiki Markup |
|---|
\[[ISO/IEC 9899:1999|AA. Bibliography#ISO/IEC 9899-1999]\] Section 7.20.4, "Communication with the environment" \[[MITRE 07|AA. Bibliography#MITRE 07]\] [CWE ID 119|http://cwe.mitre.org/data/definitions/119.html], "Failure to Constrain Operations within the Bounds of an Allocated Memory Buffer" \[[Open Group 04|AA. Bibliography#Open Group 04]\] Chapter 8, "Environment Variables" \[[Viega 03|AA. Bibliography#Viega 03]\] Section 3.6, "Using Environment Variables Securely" |
...