Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

A wide string is a contiguous sequence of wide characters terminated by and including the first null wide character. A pointer to a wide string points to its initial (lowest addressed) wide character. The length of a wide string is the number of wide characters preceding the null wide character and the value of a wide string is the sequence of code values of the contained wide characters, in order.

Recommendations

STR00-C. Use TR 24731 for remediation of existing string manipulation code

STR01-C. Use managed strings for development of new string manipulation code

...

Do not attempt to modify string literals

Do not assume bounded input

Allocated adequate space when copying bounded strings
Guarantee that all strings are null-terminated