...
MITRE CWE: CWE-119, "Failure to Constrain Operations within the Bounds of an Allocated Memory Buffer"
Bibliography
\[[Open Group 2004|AA. Bibliography#Open Group 04] \] Chapter 8, "Environment Variables"
\ Wiki Markup
[[Viega 2003|AA. Bibliography#Viega 03]\] Section 3.6, "Using Environment Variables Securely"
...
ENV00-C. Do not store the pointer to the string returned by getenv() 10. Environment (ENV)