Page Information

Title:	ENV01-C. Do not make assumptions about the size of an environment variable
Author:	Jeffrey Gennari	Apr 24, 2007
Last Changed by:	Jill Britton	Jun 30, 2022
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/3NUxBQ
Export As:	Word · PDF

Parent Page     Page: Rec. 10. Environment (ENV)

• compass/rose
• cwe-807
• android-applicable
• env
• rose-complete
• recommendation
• cwe-119

Time	Editor
Jun 30, 2022 11:03	Jill Britton	View Changes
Apr 27, 2022 06:23	Jill Britton	View Changes
Feb 28, 2021 15:34	Kris Kafka	View Changes
Added PC-lint Plus to Automated Detection Table
Jul 09, 2020 16:40	Joseph C. Sible	View Changes
Add a POSIX/C2x solution, and free path at the end
Aug 30, 2019 18:01	Anirban Gangopadhyay

External Links (8)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://cwe.mitre.org/data/definitions/125.html
    cwe.mitre.org/data/definitions/119.html
    https://cwe.mitre.org/data/definitions/123.html
    https://www.mathworks.com/help/bugfinder/ref/certcrec.env01…
    cwe.mitre.org/
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT C Coding Standard (15)     Page: Polyspace Bug Finder     Page: PC-lint Plus_V     Page: Rose     Page: AA. Bibliography     Page: CodeSonar     Page: Klocwork_V     Page: BB. Definitions     Page: Klocwork     Page: Parasoft_V     Page: PC-lint Plus     Page: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator     Page: Polyspace Bug Finder_V     Page: Parasoft     Page: CodeSonar_V     Home page: SEI CERT C Coding Standard