You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Do not initialize an array of characters using a string literal with more characters (including the '\0') than the array. Therefore, it is necessary to specify the correct size of a string literal (char s4 = "abc"(wink).

Non-Compliant Code Example

This non-compliant code example initializes an array of characters using a string literal that defines one more character (counting the terminating '\0') than the array can hold.

char s[3] = "abc";

The size of the array is three, although the size of the string literal is 4.

Compliant Solution (run time)

This compliant solution uses the the initialization method of not describing the size, because the result of the expectation always can be obtained even if the size of the string literal is changed,

char s[] = "abc";

Risk Assessment

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

STR09-A

high

probable

medium

P12

L1

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

References

[[ISO/IEC 9899-1999]]
[[Seacord 05a]] Chapter 2, "Strings"


STR06-A. Do not assume that strtok() leaves the parse string unchanged      07. Characters and Strings (STR)      

  • No labels