Page Information

Title:	STR03-C. Do not inadvertently truncate a string
Author:	Admin	Aug 23, 2006
Last Changed by:	Jill Britton	Apr 27, 2022
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/D9cxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (1)     Page: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator

Parent Page     Page: Rec. 07. Characters and Strings (STR)

• rose-false-positive
• ldra
• fortify
• compass/rose
• android-applicable
• exceptions
• tr24731
• recommendation
• str
• klocwork

Time	Editor
Apr 27, 2022 08:44	Jill Britton	View Changes
Aug 30, 2019 17:42	Anirban Gangopadhyay	View Changes
Aug 09, 2018 16:37	Anirban Gangopadhyay	View Changes
Aug 06, 2018 06:28	Michal Rozenau	View Changes
Parasoft C/C++test 10.4
Mar 26, 2018 18:27	Martin Sebor
Add GCC to Automated Detection.

External Links (11)
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    cwe.mitre.org/data/definitions/170.html
    https://www.securecoding.cert.org/confluence/display/seccod…
    https://www.mathworks.com/help/bugfinder/ref/certcrec.str03…
    gcc.gnu.org
    cwe.mitre.org/data/definitions/464.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/
    https://gcc.gnu.org/onlinedocs/gcc/Warning-Options.html#ind…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT C++ Coding Standard (2)     Page: VOID STR03-CPP. Do not inadvertently truncate a null-terminated character array     Home page: SEI CERT C++ Coding Standard

SEI CERT C Coding Standard (17)     Page: Parasoft_V     Page: Klocwork_V     Page: ERR03-C. Use runtime-constraint handlers when calling the bounds-checking interfaces     Page: Rose     Page: CodeSonar     Page: STR07-C. Use the bounds-checking interfaces for string manipulation     Page: CodeSonar_V     Page: STR32-C. Do not pass a non-null-terminated character sequence to a library function that expects a string     Page: LDRA_V     Page: Parasoft     Page: BB. Definitions     Page: Klocwork     Page: LDRA     Page: Polyspace Bug Finder     Page: AA. Bibliography     Page: Polyspace Bug Finder_V     Home page: SEI CERT C Coding Standard