Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cb16e4ba5ff3de70-a4d5cdb4-495245ba-8fc7a580-f53f32029d98e08b6a89db7e"><ac:parameter ac:name="">Apple 06</ac:parameter></ac:structured-macro>
\[Apple 06\] Apple, Inc. [_Secure Coding Guide_|http://developer.apple.com/documentation/Security/Conceptual/SecureCodingGuide/SecureCodingGuide.pdf], (May 2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c242475f3360cc0d-01045f83-457b41af-a1e8bb75-bef0b43c95d0d7d4f8164c25"><ac:parameter ac:name="">Banahan 03</ac:parameter></ac:structured-macro>
\[Banahan 03\] Banahan, Mike. [The C Book|http://www.phy.duke.edu/~rgb/General/c_book/c_book/index.html], (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="331c237d9f77c235-d013acb1-4df148d1-8b5aad0c-933baf0b9db9cabf1690d5ab"><ac:parameter ac:name="">Bryant 03</ac:parameter></ac:structured-macro>
\[Bryant 03\] Bryant, Randy; O'Halloran, David. _Computer Systems: A Programmer's Perspective_. Prentice Hall, 2003. ISBN 0-13-034074-X.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8380ec8150469ded-2ab0dff0-4ecc4d89-b385868e-ff5748c93d392200dbd58c62"><ac:parameter ac:name="">Burch 06</ac:parameter></ac:structured-macro>
\[Burch 06\] Burch, H.; Long, F.; & Seacord, R. [_Specifications for Managed Strings_|http://www.sei.cmu.edu/publications/documents/06.reports/06tr006.html] (CMU/SEI-2006-TR-006). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e3720f3c95837e04-98b174e6-48814814-a71ba34d-0b35183a879d1e6fcf8b808b"><ac:parameter ac:name="">Callaghan 95</ac:parameter></ac:structured-macro>
\[Callaghan 95\] Callaghan, B.; Pawlowski, B.; & Staubach, P. [IETF RFC 1813 NFS Version 3 Protocol Specification|http://www.ietf.org/rfc/rfc1813.txt], (June 1995).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e0e6325d12ca09a9-5485b800-49634e76-87ecb7b2-f8b8b1be9e7d86a9a081a3df"><ac:parameter ac:name="">CERT 06a</ac:parameter></ac:structured-macro>
\[CERT 06a\] CERT/CC. [CERT/CC Statistics 1988-2006|http://www.cert.org/stats/cert_stats.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f8ef0531226c242b-c2da8619-40ef41fa-8376b095-44bbd7596f334c12d0b0919e"><ac:parameter ac:name="">CERT 06b</ac:parameter></ac:structured-macro>
\[CERT 06b\] CERT/CC. US-CERT's [Technical Cyber Security Alerts|http://www.us-cert.gov/cas/techalerts/index.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ec51eafd943f4754-1353cafc-4c084f7a-8d5eb326-d59f08ce721a49f61870bcde"><ac:parameter ac:name="">CERT 06c</ac:parameter></ac:structured-macro>
\[CERT 06c\] CERT/CC. [Secure Coding|http://www.cert.org/secure-coding/] web site.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce21284b2b73c88e-999c56b1-4c314a29-9093b6c1-2eb98c21cdeed78d0c528ad4"><ac:parameter ac:name="">Coverity 07</ac:parameter></ac:structured-macro>
\[Coverity 07\] Coverity Prevent User's Manual (3.3.0), (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7be83d3620a25955-f9c79e9b-46d24358-abdd8462-1b8a3211ae783b5a0d7b9c78"><ac:parameter ac:name="">Dewhurst 02</ac:parameter></ac:structured-macro>
\[Dewhurst 02\] Dewhurst, Stephen C. _C+\+ Gotchas: Avoiding Common Problems in Coding and Design_. Boston, MA: Addison-Wesley Professional, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="94e3c1b52eff3e20-99a7c8dd-45814b67-9902b1da-af3006e31250c2f1966736cc"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 06\] U.S. Department of Homeland Security. [Build Security In|https://buildsecurityin.us-cert.gov/].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0e7d733555a5d3f6-3da8892f-4bbc408f-b90d8936-27c66e83f393b5699866c7c8"><ac:parameter ac:name="">Dowd 06</ac:parameter></ac:structured-macro>
\[Dowd 06\] Dowd, M.; McDonald, J.; & Schuh, J. _The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities_. Boston, MA: Addison-Wesley, 2006. See [http://taossa.com] for updates and errata.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f928a5fd11963909-ae18703b-4375493f-9d44a3d9-e0b326955b1ddf01217f25e5"><ac:parameter ac:name="">Drepper 06</ac:parameter></ac:structured-macro>
\[Drepper 06\] Drepper, Ulrich. [Defensive Programming for Red Hat Enterprise Linux (and What To Do If Something Goes Wrong)|http://people.redhat.com/drepper/defprogramming.pdf], (May 3, 2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b3ba01356ac68429-2c656060-4b3e48bb-a4c38a17-4a4ffa61e5b81fce62afdde2"><ac:parameter ac:name="">FSF>Finlay 05<03</ac:parameter></ac:structured-macro>
\[FSFFinlay 0503\] FreeFinlay, SoftwareIan FoundationA. CERT Advisory [GCC online documentationCA-2003-16, [Buffer Overflow in Microsoft RPC|http://gccwww.gnucert.org/onlinedocs] (2005)/advisories/CA-2003-16.html]. CERT/CC, July 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6a9066a71cdfdb01-73619b98-4dd04610-933ca0e3-8bc0e40931a0e4d195424ef6"><ac:parameter ac:name="">Fortify 06</ac:parameter></ac:structured-macro>
\[Fortify 06\] Fortify Software Inc. [Fortify Taxonomy: Software Security Errors|http://www.fortifysoftware.com/vulncat/], (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="733d40330805dc24-37b6e99f-43234432-b675bd01-2ca0d7275289c9662de57ffc"><ac:parameter ac:name="">Garfinkel>FSF 96<05</ac:parameter></ac:structured-macro>
\[GarfinkelFSF 9605\] SimsonFree Garfinkel, Gene SpaffordSoftware Foundation. Practical[GCC UNIX & Internet Security. ISBN 1-56592-148-8, 1004 pages.
Second Edition, April 1996online documentation|http://gcc.gnu.org/onlinedocs], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="65371a121d511ba5-864205b4-4baf4f0e-9cf990d2-8bdcf1ed84c6443086d1a466"><ac:parameter ac:name="">GNU>Garfinkel Pth<96</ac:parameter></ac:structured-macro>
\[GNUGarfinkel Pth96\] Simson EngelschallGarfinkel, RalfGene SSpafford. [GNU Portable Threads|http://www.gnu.org/software/pth/] (2006) Practical UNIX & Internet Security. ISBN 1-56592-148-8, 1004 pages.
Second Edition, April 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d70983864cd5ea0-ccaa6ee7-4f1a4f7d-ad43b344-add1acffef5359b5731bad29"><ac:parameter ac:name="">Goldberg>GNU 91<Pth</ac:parameter></ac:structured-macro>
\[GoldbergGNU 91Pth\] GoldbergEngelschall, Ralf DavidS. [WhatGNU Every Computer Scientist Should Know About Floating-Point ArithmeticPortable Threads|http://docswww.sungnu.comorg/sourcesoftware/806-3568/ncg_goldberg.html]. Sun Microsystems, March 1991pth/], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4cf8f8cc4cd45cbc-304b29cb-46fd44b5-bced8bca-eafa4c7a087b8ce3681a2c9e"><ac:parameter ac:name="">Graf>Goldberg 03<91</ac:parameter></ac:structured-macro>
\[GraffGoldberg 0391\] GraffGoldberg, Mark GDavid. &[What VanEvery Wyk,Computer KennethScientist R.Should _SecureKnow Coding: Principles and Practices_. Cambridge, MA: O'Reilly, 2003 (ISBN 0596002424)About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html]. Sun Microsystems, March 1991.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bba8ed31c8c7f657-a8a56d8d-499b449b-be389486-8c01132118ad02106058255f"><ac:parameter ac:name="">Griffiths>Graf 06<03</ac:parameter></ac:structured-macro>
\[GriffithsGraff 0603\] GriffithsGraff, AndrewMark G. "[Clutching& atVan straws:Wyk, WhenKenneth youR. can_Secure shiftCoding: thePrinciples stack pointer|http://felinemenace.org/papers/p63-0x0e_Shifting_the_Stack_Pointer.txt]."&nbsp;and Practices_. Cambridge, MA: O'Reilly, 2003 (ISBN 0596002424).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ee77a427bd681d54-a9bf7e22-43f546ed-a8f4baaa-6cef0110ecc8933b6ca61646"><ac:parameter ac:name="">Haddad>Griffiths 05<06</ac:parameter></ac:structured-macro>
\[HaddadGriffiths 0506\] HaddadGriffiths, IbrahimAndrew. "Secure[Clutching Codingat instraws: CWhen and C++: An interview with Robert Seacord, senior vulnerability analyst at CERT." _Linux World Magazine_, November 2005.you can shift the stack pointer|http://felinemenace.org/papers/p63-0x0e_Shifting_the_Stack_Pointer.txt]."&nbsp;

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3a2167e40bb0f173-869b6387-45a74856-a93e8dd9-f60120522d61669b6aeda24b"><ac:parameter ac:name="">Hatton>Haddad 95<05</ac:parameter></ac:structured-macro>
\[HattonHaddad 9505\] HattonHaddad, LesIbrahim. _Safer C: Developing Software for High-Integrity and Safety-Critical Systems_. New York, NY: McGraw-Hill Book Company, 1995 (ISBN 0-07-707640-0)"Secure Coding in C and C++: An interview with Robert Seacord, senior vulnerability analyst at CERT." _Linux World Magazine_, November 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bfc73fa48b971c98-0384d42f-42654216-82e6afd3-d0c479a17d6516ad8ea05fb0"><ac:parameter ac:name="">Horton>Hatton 90<95</ac:parameter></ac:structured-macro>
\[HortonHatton 9095\] MarkHatton, R. Horton. Portable C software. Prentice-Hall, Inc. Upper Saddle River, NJ. 1990. ISBN:0-13-868050-7Les. _Safer C: Developing Software for High-Integrity and Safety-Critical Systems_. New York, NY: McGraw-Hill Book Company, 1995 (ISBN 0-07-707640-0).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8bb58772b6a2ffad-ca46d2af-473844c9-9eb49492-6a055cc6836a9ec366fb58b1"><ac:parameter ac:name="">Howard>Horton 02<90</ac:parameter></ac:structured-macro>
\[HowardHorton 0290\] Michael Howard, DavidMark R. Horton. Portable C. LeBlancsoftware. [Writing Secure Code, Second Edition|http://www.microsoft.com/mspress/books/5957.aspx] Microsoft Press; 2 Sub edition (December, 2002Prentice-Hall, Inc. Upper Saddle River, NJ, 1990 (ISBN:0-13-868050-7).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fba679051283fc0f-93579f55-48c54443-94cdb007-5e91e384983584b2dbd91d99"><ac:parameter ac:name="">HP>Howard 03<02</ac:parameter></ac:structured-macro>
\[HPHoward 0302\] [Tru64 UNIX: Protecting Your System Against File Name Spoofing AttacksMichael Howard, David C. LeBlanc. [Writing Secure Code, Second Edition|http://h30097www.www3.hpmicrosoft.com/docsmspress/wpapers/spoof_wp/symlink_external.pdf]. Houston, TX: Hewlett-Packard Company, January 2003books/5957.aspx] Microsoft Press; 2 Sub edition, December, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4b1448938f045912-aa932491-4c614153-89b1a618-ba9cd6a5ecd999841a48f096"><ac:parameter ac:name="">IEC>HP 60812 2006<03</ac:parameter></ac:structured-macro>
\[IECHP 60812 200603\] _Analysis techniques for system reliability - Procedure for failure mode and effects analysis (FMEA)_, 2nd ed. (IEC 60812). IEC, January 2006[Tru64 UNIX: Protecting Your System Against File Name Spoofing Attacks|http://h30097.www3.hp.com/docs/wpapers/spoof_wp/symlink_external.pdf]. Houston, TX: Hewlett-Packard Company, January 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="49482924194edca1-0168a739-4ba74b12-99468005-52aa091c457cda3c542a646a"><ac:parameter ac:name="">IEC 6150860812 4<2006</ac:parameter></ac:structured-macro>
\[IEC 61508-460812 2006\]&nbsp; _FunctionalAnalysis safetytechniques of electrical/electronic/programmable electronic safety-related systems - Part 4: Definitions and abbreviations_, 1998.for system reliability - Procedure for failure mode and effects analysis (FMEA)_, 2nd ed. (IEC 60812). IEC, January 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="caf1e73bb3109e6b-ec3d9ebd-46a649cc-b1949998-2777cb577bac4e59ce56c421"><ac:parameter ac:name="">IEEE>IEC 75461508 2006<4</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE. [_Standard for Binary Floating-Point Arithmetic_|http://grouper.ieee.org/groups/754/] (IEEE 754-1985) (2006)IEC 61508-4\]&nbsp; _Functional safety of electrical/electronic/programmable electronic safety-related systems - Part 4: Definitions and abbreviations_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c3cbf4a0b92fa95f-ffbf2810-418a46c3-b6f6ab6b-fa05e725cb5ac9a2f1b4cd19"><ac:parameter ac:name="">ilja>IEEE 754 06<2006</ac:parameter></ac:structured-macro>
\[iljaIEEE 754 062006\] iljaIEEE. "[readlink abuse[_Standard for Binary Floating-Point Arithmetic_|http://blogsgrouper.23ieee.nuorg/iljagroups/stories754/12551/]." _ilja's blog_, August 13 (IEEE 754-1985), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="899ae1e1f4fc5157-c4fff527-4be24d60-963a9dff-03e9b95213c505109e514b92"><ac:parameter ac:name="">ISO/IEC 10646-2003<>ilja 06</ac:parameter></ac:structured-macro>
\[ISO/IEC 10646:2003ilja 06\] _Information technology -- Universal Multiple-Octet Coded Character Set (UCS)_ (ISO/IEC 10646:2003). Geneva, Switzerland: International Organization for Standardization, 2003ilja. "[readlink abuse|http://blogs.23.nu/ilja/stories/12551/]." _ilja's blog_, August 13, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e5b5b9378b6f0275-64217cd2-46ba4006-a2e28eaa-fcb444439d61cf7b816425fe"><ac:parameter ac:name="">ISO/IEC 64610646-1991<2003</ac:parameter></ac:structured-macro>
\[ISO/IEC 646-199110646:2003\] ISO/IEC. _Information technology: ISO 7--bit codedUniversal characterMultiple-Octet setCoded forCharacter informationSet interchange(UCS)_ (ISO/IEC 646-199110646:2003). Geneva, Switzerland: International Organization for Standardization, 19912003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6664f60ccbcd7b52-c45144f4-449849fe-8f61872d-d4f5fc9ed21d638af75673f4"><ac:parameter ac:name="">ISO/IEC 9899646-1999<1991</ac:parameter></ac:structured-macro>
\[ISO/IEC 9899:1999646-1991\] ISO/IEC. _Programming Languages --- C, Second EditionInformation technology: ISO 7-bit coded character set for information interchange_ (ISO/IEC 9899:1999646-1991). Geneva, Switzerland: International Organization for Standardization, 19991991.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c5715afe3497e84c-e61c62eb-469c43cd-83c7b293-c6603975faedfd55bdb74a70"><ac:parameter ac:name="">ISO/IEC 148829899-2003<1999</ac:parameter></ac:structured-macro>
\[ISO/IEC 14882-20039899:1999\] ISO/IEC. _Programming Languages --- C++, Second Edition_ (ISO/IEC 14882-20039899:1999). Geneva, Switzerland: International Organization for Standardization, 20031999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5ac85183ebdd6804-1886f6bf-4b6c4c08-a0e2a582-841260001eabb4b688d64359"><ac:parameter ac:name="">ISO/IEC 03<14882-2003</ac:parameter></ac:structured-macro>
\[ISO/IEC 0314882-2003\] ISO/IEC. [_Rationale for International Standard --- Programming Languages --- C++, RevisionSecond 5.10_|http://www.open-std.org/jtc1/sc22/wg14/www/C99RationaleV5.10.pdf].Edition_ (ISO/IEC 14882-2003). Geneva, Switzerland: International Organization for Standardization, April 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f80882d9cd4de40d-9b3440b0-4deb47c6-8596af24-fb3fe28585c22241ac7dcbce"><ac:parameter ac:name="">ISO/IEC JTC1/SC22/WG11<03</ac:parameter></ac:structured-macro>
\[ISO/IEC JTC1/SC22/WG1103\] ISO/IEC. [_Binding TechniquesRationale for International Standard --- Programming Languages --- C, Revision 5.10_|http://www.open-std.org/JTC1jtc1/sc22/SC22wg14/WG11www/C99RationaleV5.10.pdf] (ISO/IEC JTC1/SC22/WG11) (2007). Geneva, Switzerland: International Organization for Standardization, April 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1f5ac61618f03713-715b3c6e-4eed4415-81a49c3e-c764d265fcb48c4546f93bab"><ac:parameter ac:name="">ISO/IEC TR 24731-1-2007<JTC1/SC22/WG11</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24731-1-2007JTC1/SC22/WG11\] ISO/IEC TR 24731. [_Binding Techniques_|http://www.open-std.org/JTC1/SC22/WG11/] (ISO/IEC JTC1/SC22/WG11), 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="51277df83c4d3ff4-7d98e422-4d2b4690-9446b527-e2fd9d4dd92c88ed8676243c"><ac:parameter ac:name="">Jack 07</ac:parameter></ac:structured-macro>
\[Jack 07\] Jack, Barnaby. [_Vector Rewrite Attack_|http://www.juniper.net/solutions/literature/white_papers/Vector-Rewrite-Attack.pdf], (May 2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="398f19f2b3c87b32-bd87a445-4c244223-b7e6942f-8fa13ab3069599c3b2c75070"><ac:parameter ac:name="">Jones 04</ac:parameter></ac:structured-macro>
\[Jones 04\] Jones, Nigel. ["Learn a new trick with the offsetof() macro."|http://www.netrino.com/Articles/OffsetOf/index.php] _Embedded Systems Programming_, March 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="34ff28ef6eae78cf-60031cbc-4f914d83-bc3da4ed-833e5698aeffaba839ac3972"><ac:parameter ac:name="">Kennaway 00</ac:parameter></ac:structured-macro>
\[Kennaway 00\] Kennaway, Kris. [Re: /tmp topic|http://lwn.net/2000/1221/a/sec-tmp.php3], (December 2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8a7055a42d483d9c-385d8ece-46b34390-b1a8866b-8b27937eca48efc296518cb8"><ac:parameter ac:name="">Kerrighan 88</ac:parameter></ac:structured-macro>
\[Kerrighan 88\] Kerrighan, B. W. & Ritchie, D. M. _The C Programming Language, 2nd ed._ Englewood Cliffs, NJ: Prentice-Hall, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="71ccb5b77b8e4fef-b0a94ff8-4ab14c4d-9fe99745-4e0b0678f106f52a7cdf8896"><ac:parameter ac:name="">Kettle 02</ac:parameter></ac:structured-macro>
\[Kettlewell 02\] Kettlewell, Richard. [_C Language Gotchas_|http://www.greenend.org.uk/rjk/2001/02/cfu.html], (February 2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b118ca27f5fad5f7-738f0a87-406f4567-a2f38c00-b5a5d067f140b08ee004c6e6"><ac:parameter ac:name="">Kettle 03</ac:parameter></ac:structured-macro>
\[Kettlewell 03\] Kettlewell, Richard. [_Inline Functions In C_|http://www.greenend.org.uk/rjk/2003/03/inline.html], (March 2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1e39c8d0e4b4d4dd-cec10bbe-42434b30-866fab95-a89519b6aa99060f2619d6ec"><ac:parameter ac:name="">Kirch-Prinz 02</ac:parameter></ac:structured-macro>
\[Kirch-Prinz 02\] Ulla Kirch-Prinz, Peter Prinz. _C Pocket Reference_.  O'Reilly., November 2002, (ISBN: 0-596-00436-2).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="449ba6603e073144-78869a6d-4cb54eae-bb959f5e-0e89495803b5403943289ceb"><ac:parameter ac:name="">Klein 02</ac:parameter></ac:structured-macro>
\[Klein 02\] Klein, Jack. [_Bullet Proof Integer Input Using strtol()_|http://home.att.net/~jackklein/c/code/strtol.html], (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c8b6960a09316057-676aaf87-400c497a-bd52a110-fcf4d8f3a35b4a256325ec35"><ac:parameter ac:name="">Koenig 89</ac:parameter></ac:structured-macro>
\[Koenig 89\]
Andrew Koenig. _C Traps and Pitfalls_. Addison-Wesley Professional, (January 1, 1989).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4f74b61e314b64ed-888f0782-415b49fa-aa6c9926-572f00d4d7b4be6a0d32dd16"><ac:parameter ac:name="">Kuhn 06</ac:parameter></ac:structured-macro>
\[Kuhn 06\] Kuhn, Markus. [_UTF-8 and Unicode FAQ for Unix/Linux_|http://www.cl.cam.ac.uk/~mgk25/unicode.html], (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04644c3f7716f037-f58beca7-45b1436e-bc619ec3-c0f8bb61be31f50fc0fabf81"><ac:parameter ac:name="">Lai 06</ac:parameter></ac:structured-macro>
\[Lai 06\] Lai, Ray. "[Reading Between the Lines|http://undeadly.org/cgi?action=article&sid=20061027031811]." _OpenBSD Journal_, October 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="17bc9ed8849a6a7c-0ff68195-4f684590-8957862e-dd07b3ecea8e93c790a4d91f"><ac:parameter ac:name="">Lions 96</ac:parameter></ac:structured-macro>
\[Lions 96\] Lions, J. L. [ARIANE 5 Flight 501 Failure Report|http://en.wikisource.org/wiki/Ariane_501_Inquiry_Board_report]. Paris, France: European Space Agency (ESA) & National Center for Space Study (CNES) Inquiry Board, July 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2840d7642cddd3ab-209c06d6-48c7433d-a00d8973-7e736a53430bf885eee70b50"><ac:parameter ac:name="">Lockheed Martin 2005</ac:parameter></ac:structured-macro>
\[Lockheed Martin 2005\] Lockheed Martin. _Joint Strike Fighter Air Vehicle C+\+ Coding Standards for the System Development and Demonstration Program_. Document Number 2RDU00001, Rev C.  December 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6c058d88504187b3-4e341906-4abd4f36-91a58562-5f397a8f3c6d02e9ab954c92"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 01\] [_flexible array members and designators in C9X_|http://www.usenix.org/publications/login/2001-07/pdfs/mccluskey.pdf] ;login:, July 2001, Volume 26, Number 4, p. 29-32.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8b290c1896dc2697-fb15739a-42cb46aa-8534a5e8-12446ef29e350cc1c51029a1"><ac:parameter ac:name="">mercy 06</ac:parameter></ac:structured-macro>
\[mercy\] mercy. [_Exploiting Uninitialized Data_|http://www.felinemenace.org/papers/UBehavior.zip], (January 2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9668487fff5ae4a3-cdbe3187-45084f0f-9479b211-ef7823f36d1604d1a7153fcf"><ac:parameter ac:name="">MISRA>Microsoft 04<03</ac:parameter></ac:structured-macro>
\[MISRAMicrosoft 0403\] Microsoft Security MISRA Limited. "[MISRA CBulletin MS03-026, [Buffer Overrun In RPC Interface Could Allow Code Execution (823980)|http://www.misra.org.uk/]: 2004 Guidelines for the Use of the C Language in Critical Systems." Warwickshire, UK: MIRA Limited, October 2004 (ISBN 095241564X)microsoft.com/technet/security/bulletin/MS03-026.mspx], September, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6b2913a2790797f5-2e3d5ce0-4efc4a99-a599bc0b-7221c44584335908a989c5c7"><ac:parameter ac:name="">Microsoft 07</ac:parameter></ac:structured-macro>
\[Microsoft 07\] [C Language Reference|http://msdn2.microsoft.com/en-us/library/fw5abdx6(VS.80).aspx]., 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a78841be4535d4d5-f84b4d59-4bc549f5-8ee990a1-5e604d363212d1826a8e4098"><ac:parameter ac:name="">Murenin>MISRA  07<04</ac:parameter></ac:structured-macro>
\[MureninMISRA 0704\] ConstantineMISRA ALimited. Murenin. [cnst: 10-year-old pointer-arithmetic bug in make(1) is now gone, thanks to malloc.conf and some debugging|http://cnst.livejournal.com/24040.html]\]. June, 2007"[MISRA C|http://www.misra.org.uk/]: 2004 Guidelines for the Use of the C Language in Critical Systems." Warwickshire, UK: MIRA Limited, October 2004 (ISBN 095241564X).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f4d0780f3ddbd594-9749de5a-44374c48-b4b789f7-0975cf952f45c8f0466036ed"><ac:parameter ac:name="">MIT 05</ac:parameter></ac:structured-macro>
\[MIT 05\] MIT. "[MIT krb5 Security Advisory 2005-003|http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2005-003-recvauth.txt], (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="69eb83b6237a84af-5e55a61a-48c54ad9-b6289e4c-6c441d897b1b9cf4eec59003"><ac:parameter ac:name="">MITRE 07</ac:parameter></ac:structured-macro>
\[MITRE 07\] MITRE. [Common Weakness Enumeration, Draft 7|http://cwe.mitre.org/].,  October, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e83657712c33ac03-5d57ba70-4b0b4ff2-9294b73a-0af0c912a73cabd5c10653e4"><ac:parameter ac:name="">MSDN 07</ac:parameter></ac:structured-macro>
\[MSDN 07\] MSDN. [Inheritance (Windows)|http://msdn2.microsoft.com/en-us/library/ms683463.aspx], (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e1fe25bfe4dd7755-a3c256ac-4bd54661-9049a145-661d4be421e8c57eafc4adcc"><ac:parameter ac:name="">NAI>Murenin  98<07</ac:parameter></ac:structured-macro>
\[NAIMurenin 9807\] NetworkConstantine AssociatesA. IncMurenin. [Bugtraqcnst: Network Associates Inc. Advisory (OpenBSD)10-year-old pointer-arithmetic bug in make(1) is now gone, thanks to malloc.conf and some debugging|http://seclistscnst.livejournal.org/bugtraq/1998/Aug/0071com/24040.html] (1998), June 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="83a0f6a4730cb584-0d9ce9fe-476748a6-977eacd5-7c889a1f18a86eabbebf1a56"><ac:parameter ac:name="">NASA-GB-1740.13<>NAI 98</ac:parameter></ac:structured-macro>
\[NASA-GB-1740.13NAI 98\] NASANetwork GlennAssociates Research Center, Office of Safety Assurance Technologies. [_NASA Software Safety Guidebook_Inc. [Bugtraq: Network Associates Inc. Advisory (OpenBSD)|http://pbmaseclists.nasa.govorg/docsbugtraq/public1998/pbmaAug/general/guidbook0071.dochtml] (NASA-GB-1740.13)., 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9015926c327d341e-722993de-486c4e09-9733b1f5-217cab22be508a108fd110fa"><ac:parameter ac:name="">NIST 06<>NASA-GB-1740.13</ac:parameter></ac:structured-macro>
\[NIST 06NASA-GB-1740.13\] NIST. [_SAMATE Reference Dataset_NASA Glenn Research Center, Office of Safety Assurance Technologies. [_NASA Software Safety Guidebook_|http://samatepbma.nistnasa.gov/SRD/docs/public/pbma/general/guidbook.doc] (2006NASA-GB-1740.13).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5feb81f8c2e3290e-1b73ff9b-40634125-8b2b8808-06e0e7d9b20fa03fe3fc41d1"><ac:parameter ac:name="">NIST 06b<06</ac:parameter></ac:structured-macro>
\[NIST 06b06\] NIST. [DRAFT_SAMATE Source Code Analysis Tool Functional Specification. | Reference Dataset_|http://samate.nist.gov/docs/SAMATE_source_code_analysis_tool_spec_09_15_06.pdf] NIST Information Technology Laboratory (ITL), Software Diagnostics and Conformance Testing Division, September 2006.SRD/], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="700e5775ec1a5044-b260ad7c-47e04f80-9474b7a0-10db64da4dd61f724c61d6a8"><ac:parameter ac:name="">Open>NIST Group 97<06b</ac:parameter></ac:structured-macro>
\[OpenNIST Group 9706b\] The Open Group. [_The Single UNIX® Specification, Version 2_|NIST. [DRAFT Source Code Analysis Tool Functional Specification. | http://wwwsamate.opengroupnist.orggov/onlinepubs/7990989775/toc.htm] (1997).docs/SAMATE_source_code_analysis_tool_spec_09_15_06.pdf] NIST Information Technology Laboratory (ITL), Software Diagnostics and Conformance Testing Division, September 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eacbf4d8c06f6b90-f31096e5-472f4ee5-885f8b01-7a2076315044bd3c78349008"><ac:parameter ac:name="">Open Group 04<97b</ac:parameter></ac:structured-macro>
\[Open Group 0497b\] The Open Group and the IEEE. [_TheGo Solo Open2 Group- BaseThe SpecificationsAuthorized IssueGuide 6,to IEEEVersion Std 1003.1, 2004 Edition2 of the Single UNIX Specification_|http://www.opengroupunix.org/onlinepubswhitepapers/009695399/toc64bit.htmhtml] (2004), May 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1f44571df4db8606-f5a85093-41d24bfe-b4188626-8bdafc8c46548a4238b29a4b"><ac:parameter ac:name="">Plakosh>Open Group 05<04</ac:parameter></ac:structured-macro>
\[PlakoshOpen Group 0504\] Plakosh, Dan The Open Group and the IEEE. _[_Consistent Memory Management Conventions_|https://buildsecurityin.us-cert.gov/daisy/bsi/articles/knowledge/coding/476.html]_ (2005)The Open Group Base Specifications Issue 6, IEEE Std 1003.1, 2004 Edition_|http://www.opengroup.org/onlinepubs/009695399/toc.htm], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a4fc49c2768e506e-667106cb-46704bbc-ad399cb8-8ac0ed5e4b9210767deec48d"><ac:parameter ac:name="">Plum>Plakosh 85<05</ac:parameter></ac:structured-macro>
\[PlumPlakosh 8505\] PlumPlakosh, ThomasDan. _[_ReliableConsistent DataMemory StructuresManagement in C_. Kamuela, HI: Plum Hall, Inc., 1985 (ISBN 0-911537-04-X)Conventions_|https://buildsecurityin.us-cert.gov/daisy/bsi/articles/knowledge/coding/476.html]_, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="39ac4e6e0047476d-66cb1c0e-49774065-a80787a1-32099bd3ab6ecde84ef2a52b"><ac:parameter ac:name="">Plum 89<85</ac:parameter></ac:structured-macro>
\[Plum 8985\] Plum, Thomas,. & Saks, Dan. _C Programming Guidelines, 2nd ed_Reliable Data Structures in C_. Kamuela, HI: Plum Hall, Inc., 19891985 (ISBN 09115370740-911537-04-X).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ff4d30c4be77457b-1b55ebf2-48a34493-be9291ea-5268a52aa8501d91313e52f1"><ac:parameter ac:name="">Plum 91<89</ac:parameter></ac:structured-macro>
\[Plum 9189\] Plum, Thomas, & Saks, Dan. _C+\+ Programming Guidelines, 2nd ed_. Kamuela, HI: Plum Hall, Inc., 19911989 (ISBN 09115371040911537074).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="efadc8868818b0a2-1728f91e-4f6a44f2-ad779284-4dee125ee0986da8071f5d02"><ac:parameter ac:name="">Redwine>Plum 06<91</ac:parameter></ac:structured-macro>
\[RedwinePlum 0691\] RedwinePlum, Samuel TThomas., Jr., ed. _Secure Software Assurance: A Guide to the Common Body of Knowledge to Produce, Acquire, and Sustain Secure Software Version 1.1_. U.S. Department of Homeland Security, September 2006. See [Software Assurance Common Body of Knowledge|https://buildsecurityin.us-cert.gov/daisy/bsi/resources/dhs/95.html] on Build Security In. _C+\+ Programming_. Kamuela, HI: Plum Hall, Inc., 1991 (ISBN 0911537104).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4922d4bb62bd6b5b-47b7bbd0-4a5e4667-bfb09b12-2ce46f4b7cb7b1c48f013e64"><ac:parameter ac:name="">Saks>Redwine 99<06</ac:parameter></ac:structured-macro>
\[SaksRedwine 9906\] SaksRedwine, Dan. "[const T vs.T const|http://www.dansaks.com/articles/1999-02%20const%20T%20vs%20T%20const.pdf]." _Embedded Systems Programming_, February 1999, pp. 13-16.Samuel T., Jr., ed. _Secure Software Assurance: A Guide to the Common Body of Knowledge to Produce, Acquire, and Sustain Secure Software Version 1.1_. U.S. Department of Homeland Security, September 2006. See [Software Assurance Common Body of Knowledge|https://buildsecurityin.us-cert.gov/daisy/bsi/resources/dhs/95.html] on Build Security In.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eee6b97171af0075-471e0531-48854442-83d5b333-fc87dcf0f0e89f9637831c30"><ac:parameter ac:name="">Schwarz>Saks 05<07</ac:parameter></ac:structured-macro>
\[SchwarzSaks 0507\] SchwarzSaks, BDan. "[Sequence Points|http://www.embedded.com/columns/programmingpointers/9900661?_requestid=481957]" Embedded Systems Design, July 1, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1eaf56be86f04905-b7dd02a2-416f49e1-bc5d8eed-0d2fc5470b8694e6f548e152"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro> <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b1379e4c616a23e7-d93e8633-4dbf494f-b4bc9d1d-818716f45a94449d29571881"><ac:parameter ac:name="">Seacord 05a</ac:parameter></ac:structured-macro>
\[Seacord 05a\] Seacord, R. _Secure Coding in C and C+\+_. Boston, MA: Addison-Wesley, 2005. See [http://www.cert.org/books/secure-coding] for news and errata.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1a846697e1a50d9b-36cbe86a-4876498a-aada8ea8-da63bbee17b6efc199c9ff63"><ac:parameter ac:name="">Seacord 05b</ac:parameter></ac:structured-macro>
\[Seacord 05b\] Seacord, R. "Managed String Library for C, C/C++." _Users Journal_ _23_, 10 (October 2005): 30-34.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e4d8fdb1d5045940-47ad4b4c-4bcd40ad-849eb952-941fdd35fe114f54c6687974"><ac:parameter ac:name="">Seacord 05c</ac:parameter></ac:structured-macro>
\[Seacord 05c\] Robert C. Seacord. [_Variadic Functions: How they contribute to security vulnerabilities and how to fix them_|http://www.cert.org/books/secure-coding/LWM%203-11%20%28Seacord%29.pdf]. Linux World Magazine.  November, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0f8c6c223440da93-8edfc898-4f8449b2-b9ef99cf-436a228101e379c2c7589445"><ac:parameter ac:name="">Spinellis 06</ac:parameter></ac:structured-macro>
\[Spinellis 06\] Spinellis, Diomidis. [_Code Quality: The Open Source Perspective_|http://www.spinellis.gr/codequality].  Addison-Wesley, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="48f08f83a941e916-64f9e5d2-453e40fa-93378339-20025170d498c2d6976ec4ea"><ac:parameter ac:name="">Steele 77</ac:parameter></ac:structured-macro>
\[Steele 77\]  Steele, G. L. 1977. [Arithmetic shifting considered harmful.|http://doi.acm.org/10.1145/956641.956647] _SIGPLAN Not._ 12, 11 (Nov. 1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="300c795adcabc493-a18d6dc3-46f6428e-9e8cb5d2-778366db5cc319a8288675e4"><ac:parameter ac:name="">Summit 95</ac:parameter></ac:structured-macro>
\[Summit 95\] Summit, Steve. _C Programming FAQs: Frequently Asked Questions_. Boston, MA: Addison-Wesley, 1995 (ISBN 0201845199).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cb7d06fdd87c0f3b-12e1268c-43854a0d-b091b9ee-95213ad58df61889cd89dcbb"><ac:parameter ac:name="">Summit 05</ac:parameter></ac:structured-macro>
\[Summit 05\] Summit, Steve. [_comp.lang.c Frequently Asked Questions_|http://c-faq.com/], (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e867ab433723d3b9-19474b95-49b04fbc-bbb88ca8-6439acef75951bcf63382df3"><ac:parameter ac:name="">Sun 05</ac:parameter></ac:structured-macro>
\[Sun 05\] [C User's Guide|http://docs.sun.com/source/819-3688/]. 819-3688-10. Sun Microsystems, Inc., (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="199ffbd75baab182-f98856db-4d1b4cba-aa61bf43-af494e5419582cbe75521ed0"><ac:parameter ac:name="">van de Voort 07</ac:parameter></ac:structured-macro>
\[van de Voort 07\] van de Voort, Marco. [Development Tutorial (a.k.a Build FAQ)|http://www.stack.nl/~marcov/buildfaq.pdf], (January 29, 2007).

\[van Sprundel 06\] van Sprundel, Ilja. [Unusual Bugs|http://ilja.netric.org/files/Unusual%20bugs.pdf] (2006). pdf], 2006. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="33249b8ca7c1481d-5443ac5a-4f884340-b5a8955b-3795682bee27e5216bae20b6"><ac:parameter ac:name="">Viega 03<05</ac:parameter></ac:structured-macro>
\[Viega 0305\] Viega, John & Messier, Matt. _Secure[CLASP ProgrammingReference CookbookGuide for C and C++: Recipes for Cryptography, Authentication, Networking, Input Validation & More_. Sebastopol, CA: O'Reilly, 2003 (ISBN 0-596-00394-3)Volume 1.1.|http://www.securesoftware.com/process/] Secure Software, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="295e9dcaa093d9e3-92b8060c-4a084bf9-8f3b9082-37ca0caf6ebd1e6117a4a982"><ac:parameter ac:name="">Viega 05<>VU196240</ac:parameter></ac:structured-macro>
\[Viega 05VU#196240\] ViegaTaschner, John. [CLASP Reference Guide Volume 1.1.Chris & Manion, Art. Vulnerability Note [VU#196240|http://www.securesoftware.com/process/] Secure Software, 2005kb.cert.org/vulnotes/id/196240], _Sourcefire Snort DCE/RPC preprocessor does not properly reassemble fragmented packets_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="08cb1daf23678424-1abcda75-42e943cc-8d488975-dd6b8248128ddb0a86395b72"><ac:parameter ac:name="">VU196240<>VU286468</ac:parameter></ac:structured-macro>
\[VU#196240VU#286468\] TaschnerBurch, Chris & Manion, ArtHal. Vulnerability Note [VU#196240VU#286468|http://www.kb.cert.org/vulnotes/id/196240286468], _SourcefireEttercap Snortcontains DCE/RPCa preprocessorformat doesstring noterror properlyin reassemble fragmented packets_ (2007)the "curses_msg()" function_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="21db97d2d791d7e5-5b477488-43d048eb-a7c0895a-9db7b9de9acc7b377cf85df6"><ac:parameter ac:name="">VU286468<>VU#551436</ac:parameter></ac:structured-macro>
\[VU#286468VU#551436\] BurchGiobbi, HalRyan. Vulnerability Note [VU#286468VU#551436|http://www.kb.cert.org/vulnotes/id/286468551436], _EttercapMozilla containsFirefox aSVG formatviewer stringvulnerable errorto in the "curses_msg()" functionbuffer overflow,_ (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="25c01ad022ddc568-2e116b83-41794372-b4fd8dd8-f3dde2e2e23058a037a4b493"><ac:parameter ac:name="">VU#551436<>VU#568148</ac:parameter></ac:structured-macro>
\[VU#551436VU#568148\] Giobbi, Ryan Finlay, Ian A. & Morda, Damon G. Vulnerability Note [VU#551436VU#568148|http://www.kb.cert.org/vulnotes/id/551436568148], _MozillaMicrosoft FirefoxWindows SVGRPC viewer vulnerable to buffer overflow_, (2007)2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="124b7b3e70b69448-51f83226-48fc4771-b77dbbf1-0b0f6c71cd02772d0101917d"><ac:parameter ac:name="">VU623332</ac:parameter></ac:structured-macro>
\[VU#623332\] Mead, Robert. Vulnerability Note [VU#623332|http://www.kb.cert.org/vuls/id/623332], _MIT Kerberos 5 contains double free vulnerability in "krb5_recvauth()" function,_ (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b909ce055e0e76de-5d573843-48b74d99-b0099dc4-80ae501199fd5b160da240d4"><ac:parameter ac:name="">VU649732</ac:parameter></ac:structured-macro>
\[VU#649732\] Gennari, Jeff. Vulnerability Note [VU#649732|http://www.kb.cert.org/vulnotes/id/649732], _Samba AFS ACL mapping VFS plug-in format string vulnerability,_ (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ec11881f2a187ea7-8442d4fc-47e24e8d-8f5f96c8-d610cced21ac632f5c9e8a7d"><ac:parameter ac:name="">VU743092</ac:parameter></ac:structured-macro>
\[VU#743092\] Jason A. Rafail; Jeffrey S. Havrilla.  Vulnerability Note [VU#743092|https://www.kb.cert.org/vulnotes/id/743092], _realpath(3) function contains off-by-one buffer overflow,_. July, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f13444d9ca8f2f4a-27f51862-4ffd4605-9f09ae20-6575735cb1761b59d9d4ef91"><ac:parameter ac:name="">VU881872</ac:parameter></ac:structured-macro>
\[VU#881872\] Manion, Art & Taschner, Chris. Vulnerability Note [VU#881872|http://www.kb.cert.org/vulnotes/id/881872], _Sun Solaris telnet authentication bypass vulnerability,_ (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b21bb8f84af707bb-ba2dd6c8-497249f5-822cace3-c6aa03f42c7506b1cb16f49d"><ac:parameter ac:name="">Warren 02</ac:parameter></ac:structured-macro>
\[Warren 02\] Warren, Henry S. [_Hacker's Delight_|http://www.hackersdelight.org/]. Boston, MA: Addison Wesley Professional, 2002 (ISBN 0201914654).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cfd0ad768c3a5859-83d5814d-41594f40-914ba46e-77312df1ca80b6442eab6368"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 03\] Wheeler, David. [Secure Programming for Linux and Unix HOWTO, v3.010 |http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/], (March 2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0a34df3f9e0f2bef-89f07a7f-46c54bad-992da591-152308ddab4e26606afbe1a6"><ac:parameter ac:name="">Yergeau 98</ac:parameter></ac:structured-macro>
\[Yergeau 98\] Yergeau, F. [RFC 2279 - UTF-8, a transformation format of ISO 10646|http://www.faqs.org/rfcs/rfc2279.html], (January 1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8740fa6fc75045f-d5e78414-473e4d3b-aee5aee1-954c0c2e8e03f50742099e4c"><ac:parameter ac:name="">Zalewski 01</ac:parameter></ac:structured-macro>
\[Zalewski 01\] Michal Zalewski. [_Delivering Signals for Fun and Profit: Understanding, exploiting and preventing signal-handling related vulnerabilities_|http://lcamtuf.coredump.cx/signals.txt],  May, 2001.