Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ebf1f944b019bcb-6c97c9ab-47ce408c-9014b010-1192a367aa8ad6fdf4393d56"><ac:parameter ac:name="">Apple 06</ac:parameter></ac:structured-macro>
\[Apple 06\] Apple, Inc. [_Secure Coding Guide_|http://developer.apple.com/documentation/Security/Conceptual/SecureCodingGuide/SecureCodingGuide.pdf], (May 2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="280034aa0dcc1bfb-af737179-42214e9e-9b66aa55-6052469ca7ab590d13044dc3"><ac:parameter ac:name="">Banahan 03</ac:parameter></ac:structured-macro>
\[Banahan 03\] Banahan, Mike. [The C Book|http://www.phy.duke.edu/~rgb/General/c_book/c_book/index.html], (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="32d06078ed99b2ad-e3ec3c16-43044cf7-b1bb908e-983507104530555078779ebe"><ac:parameter ac:name="">Bryant 03</ac:parameter></ac:structured-macro>
\[Bryant 03\] Bryant, Randy; O'Halloran, David. _Computer Systems: A Programmer's Perspective_. Prentice Hall, 2003. ISBN 0-13-034074-X.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d1ab72a4e1b0d905-0b8a6303-4c254652-a611a141-dbf7743a1dbfd4c31649b7ae"><ac:parameter ac:name="">Burch 06</ac:parameter></ac:structured-macro>
\[Burch 06\] Burch, H.; Long, F.; & Seacord, R. [_Specifications for Managed Strings_|http://www.sei.cmu.edu/publications/documents/06.reports/06tr006.html] (CMU/SEI-2006-TR-006). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a933a951cdc0345d-164d58a0-43394083-abacafb9-4f2de4555d0b37f5224c8eff"><ac:parameter ac:name="">Callaghan 95</ac:parameter></ac:structured-macro>
\[Callaghan 95\] Callaghan, B.; Pawlowski, B.; & Staubach, P. [IETF RFC 1813 NFS Version 3 Protocol Specification|http://www.ietf.org/rfc/rfc1813.txt], (June 1995).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="539f28843971e972-5ec156ca-485f4c0e-916781bc-81a19e52dff931aa41236cdf"><ac:parameter ac:name="">CERT 06a</ac:parameter></ac:structured-macro>
\[CERT 06a\] CERT/CC. [CERT/CC Statistics 1988-2006|http://www.cert.org/stats/cert_stats.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="12f04324cf5fbd48-beb8fcf1-456648b3-94e3b895-188c509d34a5d4da0fd7840e"><ac:parameter ac:name="">CERT 06b</ac:parameter></ac:structured-macro>
\[CERT 06b\] CERT/CC. US-CERT's [Technical Cyber Security Alerts|http://www.us-cert.gov/cas/techalerts/index.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="90cfa0793b0713da-65193d7a-48a14b27-b105b5ea-d9aea8baba8e2ec68d9882ba"><ac:parameter ac:name="">CERT 06c</ac:parameter></ac:structured-macro>
\[CERT 06c\] CERT/CC. [Secure Coding|http://www.cert.org/secure-coding/] web site.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="79e7ceec9caeaade-9526d837-4d1e4be9-a52baf35-95d9931d2aa1dd6566595d1b"><ac:parameter ac:name="">Coverity 07</ac:parameter></ac:structured-macro>
\[Coverity 07\] Coverity Prevent User's Manual (3.3.0), (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="69daeccd150a1b87-2b344081-452f471f-9e278285-7e1eafd3610f56eb7d390a0e"><ac:parameter ac:name="">Dewhurst 02</ac:parameter></ac:structured-macro>
\[Dewhurst 02\] Dewhurst, Stephen C. _C+\+ Gotchas: Avoiding Common Problems in Coding and Design_. Boston, MA: Addison-Wesley Professional, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e1bbbcc340e53f8d-a5fa7b73-493543a4-8101bb7c-96fb5ededba7247c9acb91d0"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 06\] U.S. Department of Homeland Security. [Build Security In|https://buildsecurityin.us-cert.gov/].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c4a0f52961c22025-4fdb78b8-401247db-9c0f8b2c-8ea243e1006b571a494d6d16"><ac:parameter ac:name="">Dowd 06</ac:parameter></ac:structured-macro>
\[Dowd 06\] Dowd, M.; McDonald, J.; & Schuh, J. _The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities_. Boston, MA: Addison-Wesley, 2006. See [http://taossa.com] for updates and errata.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8132564010106f0-60c2fb4a-4c9e4dfb-aaf18c4c-ce1cb6cbdb29af1749353938"><ac:parameter ac:name="">Drepper 06</ac:parameter></ac:structured-macro>
\[Drepper 06\] Drepper, Ulrich. [Defensive Programming for Red Hat Enterprise Linux (and What To Do If Something Goes Wrong)|http://people.redhat.com/drepper/defprogramming.pdf], (May 3, 2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="abba5704f17e0b75-fb0bbdb4-485b480c-8b3cb19f-9ff205eff46c234e4aa55d44"><ac:parameter ac:name="">FSF>Finlay 05<03</ac:parameter></ac:structured-macro>
\[FSFFinlay 0503\] FreeFinlay, SoftwareIan FoundationA. CERT Advisory [GCC online documentationCA-2003-16, [Buffer Overflow in Microsoft RPC|http://gccwww.gnucert.org/onlinedocs] (2005)/advisories/CA-2003-16.html]. CERT/CC, July 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3bf4e9aae2f25f52-a9d87940-4da64a48-bdf382e1-b0936552c0b4da3dc91740c4"><ac:parameter ac:name="">Fortify 06</ac:parameter></ac:structured-macro>
\[Fortify 06\] Fortify Software Inc. [Fortify Taxonomy: Software Security Errors|http://www.fortifysoftware.com/vulncat/], (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8aac46176626b104-3b4f3f14-425e4b79-9a57923d-97866ea6a6fca35a084878df"><ac:parameter ac:name="">Garfinkel>FSF 96<05</ac:parameter></ac:structured-macro>
\[GarfinkelFSF 9605\] SimsonFree Garfinkel, Gene SpaffordSoftware Foundation. Practical[GCC UNIX & Internet Security. ISBN 1-56592-148-8, 1004 pages.
Second Edition, April 1996online documentation|http://gcc.gnu.org/onlinedocs], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7292ac57741987e3-d03305a8-42484bf1-a16a8405-2113daba1a1040c1d806f890"><ac:parameter ac:name="">GNU>Garfinkel Pth<96</ac:parameter></ac:structured-macro>
\[GNUGarfinkel Pth96\] Simson EngelschallGarfinkel, RalfGene SSpafford. [GNU Portable Threads|http://www.gnu.org/software/pth/] (2006) Practical UNIX & Internet Security. ISBN 1-56592-148-8, 1004 pages.
Second Edition, April 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7ef003c87af1b412-ee20db4c-4ed84123-930bbfb1-23fd3c2e431b6fc5b8b74679"><ac:parameter ac:name="">Goldberg>GNU 91<Pth</ac:parameter></ac:structured-macro>
\[GoldbergGNU 91Pth\] GoldbergEngelschall, Ralf DavidS. [WhatGNU Every Computer Scientist Should Know About Floating-Point ArithmeticPortable Threads|http://docswww.sungnu.comorg/sourcesoftware/806-3568/ncg_goldberg.html]. Sun Microsystems, March 1991pth/], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5c3ee65f9883ce6e-cc71c789-4a0c47f6-9a94bfd8-0cea7e60ac2e45c0c5ebdd6b"><ac:parameter ac:name="">Graf>Goldberg 03<91</ac:parameter></ac:structured-macro>
\[GraffGoldberg 0391\] GraffGoldberg, Mark GDavid. &[What VanEvery Wyk,Computer KennethScientist R.Should _SecureKnow Coding: Principles and Practices_. Cambridge, MA: O'Reilly, 2003 (ISBN 0596002424)About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html]. Sun Microsystems, March 1991.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2c5015abe65846f3-17815ead-4ecc4a04-9f79b6cb-edc8aa457bfce525733bdc33"><ac:parameter ac:name="">Griffiths>Graf 06<03</ac:parameter></ac:structured-macro>
\[GriffithsGraff 0603\] GriffithsGraff, AndrewMark G. "[Clutching& atVan straws:Wyk, WhenKenneth youR. can_Secure shiftCoding: thePrinciples stack pointer|http://felinemenace.org/papers/p63-0x0e_Shifting_the_Stack_Pointer.txt]."&nbsp;and Practices_. Cambridge, MA: O'Reilly, 2003 (ISBN 0596002424).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c6d1235d58b34652-351ad0e5-44454b90-99f2b9e2-65bc5a9353b7a63f1268544a"><ac:parameter ac:name="">Haddad>Griffiths 05<06</ac:parameter></ac:structured-macro>
\[HaddadGriffiths 0506\] HaddadGriffiths, IbrahimAndrew. "Secure[Clutching Codingat instraws: CWhen and C++: An interview with Robert Seacord, senior vulnerability analyst at CERT." _Linux World Magazine_, November 2005.you can shift the stack pointer|http://felinemenace.org/papers/p63-0x0e_Shifting_the_Stack_Pointer.txt]."&nbsp;

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="98a0db5dbc20c30f-3969c15b-425c432f-b0d29498-f3f7e2fa30b65976ff49904b"><ac:parameter ac:name="">Hatton>Haddad 95<05</ac:parameter></ac:structured-macro>
\[HattonHaddad 9505\] HattonHaddad, LesIbrahim. _Safer C: Developing Software for High-Integrity and Safety-Critical Systems_. New York, NY: McGraw-Hill Book Company, 1995 (ISBN 0-07-707640-0)"Secure Coding in C and C++: An interview with Robert Seacord, senior vulnerability analyst at CERT." _Linux World Magazine_, November 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c9d371c0404a74b7-32474c42-4d224009-85debcfc-bd285ea4898c84739344c269"><ac:parameter ac:name="">Horton>Hatton 90<95</ac:parameter></ac:structured-macro>
\[HortonHatton 9095\] MarkHatton, R. Horton. Portable C software. Prentice-Hall, Inc. Upper Saddle River, NJ. 1990. ISBN:0-13-868050-7Les. _Safer C: Developing Software for High-Integrity and Safety-Critical Systems_. New York, NY: McGraw-Hill Book Company, 1995 (ISBN 0-07-707640-0).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3138790a7d7064ce-4449f5d4-436842c3-ba61a0b4-b7b2ac56f617f3e05af1ee83"><ac:parameter ac:name="">Howard>Horton 02<90</ac:parameter></ac:structured-macro>
\[HowardHorton 0290\] Michael Howard, DavidMark R. Horton. Portable C. LeBlancsoftware. [Writing Secure Code, Second Edition|http://www.microsoft.com/mspress/books/5957.aspx] Microsoft Press; 2 Sub edition (December, 2002Prentice-Hall, Inc. Upper Saddle River, NJ, 1990 (ISBN:0-13-868050-7).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="34f0aba9ef956df6-754658cf-46a5468b-b340b043-beeba21708d2b0fd28403b6b"><ac:parameter ac:name="">HP>Howard 03<02</ac:parameter></ac:structured-macro>
\[HPHoward 0302\] [Tru64 UNIX: Protecting Your System Against File Name Spoofing AttacksMichael Howard, David C. LeBlanc. [Writing Secure Code, Second Edition|http://h30097www.www3.hpmicrosoft.com/docsmspress/wpapers/spoof_wp/symlink_external.pdf]. Houston, TX: Hewlett-Packard Company, January 2003books/5957.aspx] Microsoft Press; 2 Sub edition, December, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="14afbeaf44adeec1-00814690-4ebd469e-9924a910-6feeacb42cfce468ab221928"><ac:parameter ac:name="">IEC>HP 60812 2006<03</ac:parameter></ac:structured-macro>
\[IECHP 60812 200603\] _Analysis techniques for system reliability - Procedure for failure mode and effects analysis (FMEA)_, 2nd ed. (IEC 60812). IEC, January 2006[Tru64 UNIX: Protecting Your System Against File Name Spoofing Attacks|http://h30097.www3.hp.com/docs/wpapers/spoof_wp/symlink_external.pdf]. Houston, TX: Hewlett-Packard Company, January 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d6e613606a8a3ce1-3f43d1cb-49f44dec-9021839b-61b7e18a45c32113b917af6b"><ac:parameter ac:name="">IEC 6150860812 4<2006</ac:parameter></ac:structured-macro>
\[IEC 61508-460812 2006\]&nbsp; _FunctionalAnalysis safetytechniques of electrical/electronic/programmable electronic safety-related systems - Part 4: Definitions and abbreviations_, 1998.for system reliability - Procedure for failure mode and effects analysis (FMEA)_, 2nd ed. (IEC 60812). IEC, January 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b3e8b229cc02e28-f4bb764b-4d784bcd-9361a2f2-44522ca1ea884b870ad95c43"><ac:parameter ac:name="">IEEE>IEC 75461508 2006<4</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE. [_Standard for Binary Floating-Point Arithmetic_|http://grouper.ieee.org/groups/754/] (IEEE 754-1985) (2006)IEC 61508-4\]&nbsp; _Functional safety of electrical/electronic/programmable electronic safety-related systems - Part 4: Definitions and abbreviations_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4450a96b4c994c00-c60c9591-4ec14d98-822eb83a-e9ee1b8530659ef610edced5"><ac:parameter ac:name="">ilja>IEEE 754 06<2006</ac:parameter></ac:structured-macro>
\[iljaIEEE 754 062006\] iljaIEEE. "[readlink abuse[_Standard for Binary Floating-Point Arithmetic_|http://blogsgrouper.23ieee.nuorg/iljagroups/stories754/12551/]." _ilja's blog_, August 13 (IEEE 754-1985), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a09b680d7e924a6f-7585d1ed-415d48ed-8a0fbbdd-e3ec2bd3ed7f4ea9d9d33455"><ac:parameter ac:name="">ISO/IEC 10646-2003<>ilja 06</ac:parameter></ac:structured-macro>
\[ISO/IEC 10646:2003ilja 06\] _Information technology -- Universal Multiple-Octet Coded Character Set (UCS)_ (ISO/IEC 10646:2003). Geneva, Switzerland: International Organization for Standardization, 2003ilja. "[readlink abuse|http://blogs.23.nu/ilja/stories/12551/]." _ilja's blog_, August 13, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9e46b3df02fbe03d-94666eff-4db94c61-bf408be6-6bd05dc99ea9176f19e75b72"><ac:parameter ac:name="">ISO/IEC 64610646-1991<2003</ac:parameter></ac:structured-macro>
\[ISO/IEC 646-199110646:2003\] ISO/IEC. _Information technology: ISO 7--bit codedUniversal characterMultiple-Octet setCoded forCharacter informationSet interchange(UCS)_ (ISO/IEC 646-199110646:2003). Geneva, Switzerland: International Organization for Standardization, 19912003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="acca78bad31afa3b-7ad3e6ae-4e37416a-9f97b7ef-a08dbb6535525b118a75c342"><ac:parameter ac:name="">ISO/IEC 9899646-1999<1991</ac:parameter></ac:structured-macro>
\[ISO/IEC 9899:1999646-1991\] ISO/IEC. _Programming Languages --- C, Second EditionInformation technology: ISO 7-bit coded character set for information interchange_ (ISO/IEC 9899:1999646-1991). Geneva, Switzerland: International Organization for Standardization, 19991991.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="11b9007238c4332b-5fdbee77-48634ad2-a6c6a17a-248f591fdf17ccdba988b055"><ac:parameter ac:name="">ISO/IEC 148829899-2003<1999</ac:parameter></ac:structured-macro>
\[ISO/IEC 14882-20039899:1999\] ISO/IEC. _Programming Languages --- C++, Second Edition_ (ISO/IEC 14882-20039899:1999). Geneva, Switzerland: International Organization for Standardization, 20031999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="357c1b1f3ae63df6-cbac2fdb-457e425a-8a4289f6-a71811d4ed5e6c3c21ea9a3a"><ac:parameter ac:name="">ISO/IEC 03<14882-2003</ac:parameter></ac:structured-macro>
\[ISO/IEC 0314882-2003\] ISO/IEC. [_Rationale for International Standard --- Programming Languages --- C++, RevisionSecond 5.10_|http://www.open-std.org/jtc1/sc22/wg14/www/C99RationaleV5.10.pdf].Edition_ (ISO/IEC 14882-2003). Geneva, Switzerland: International Organization for Standardization, April 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c68e4e66b544209f-565d0d93-4da64ec3-85b094e6-0dc5ca54a1d9164cc76a745d"><ac:parameter ac:name="">ISO/IEC JTC1/SC22/WG11<03</ac:parameter></ac:structured-macro>
\[ISO/IEC JTC1/SC22/WG1103\] ISO/IEC. [_Binding TechniquesRationale for International Standard --- Programming Languages --- C, Revision 5.10_|http://www.open-std.org/JTC1jtc1/sc22/SC22wg14/WG11www/C99RationaleV5.10.pdf] (ISO/IEC JTC1/SC22/WG11) (2007). Geneva, Switzerland: International Organization for Standardization, April 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="640a4649ae56d924-1d5466e1-4f934fc9-b6f8bb15-d4cde99e3185c30a5bab5f56"><ac:parameter ac:name="">ISO/IEC TR 24731-1-2007<JTC1/SC22/WG11</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24731-1-2007JTC1/SC22/WG11\] ISO/IEC TR 24731. [_Binding Techniques_|http://www.open-std.org/JTC1/SC22/WG11/] (ISO/IEC JTC1/SC22/WG11), 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2b048ced2893181e-e93caadb-4b92497d-a3fbabb4-e02265d820f5ee2bcc03ff7b"><ac:parameter ac:name="">Jack 07</ac:parameter></ac:structured-macro>
\[Jack 07\] Jack, Barnaby. [_Vector Rewrite Attack_|http://www.juniper.net/solutions/literature/white_papers/Vector-Rewrite-Attack.pdf], (May 2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b67b92dd67c2f5e6-1914042f-45b040a4-a07687a0-231e5d7f2412924be51c4301"><ac:parameter ac:name="">Jones 04</ac:parameter></ac:structured-macro>
\[Jones 04\] Jones, Nigel. ["Learn a new trick with the offsetof() macro."|http://www.netrino.com/Articles/OffsetOf/index.php] _Embedded Systems Programming_, March 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="599bad7ff4c04b6e-471373d3-47c34993-88a4948f-40ceb1d79a7546f4ec24a11b"><ac:parameter ac:name="">Kennaway 00</ac:parameter></ac:structured-macro>
\[Kennaway 00\] Kennaway, Kris. [Re: /tmp topic|http://lwn.net/2000/1221/a/sec-tmp.php3], (December 2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1d153bcb99778605-bd43d975-4a0945b8-b93fb3fe-3971a6c34d4008be6dc14282"><ac:parameter ac:name="">Kerrighan 88</ac:parameter></ac:structured-macro>
\[Kerrighan 88\] Kerrighan, B. W. & Ritchie, D. M. _The C Programming Language, 2nd ed._ Englewood Cliffs, NJ: Prentice-Hall, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="08010441ae645b16-578134b3-498544de-8c6fabae-2478a1b5a32656a86a4c42a9"><ac:parameter ac:name="">Kettle 02</ac:parameter></ac:structured-macro>
\[Kettlewell 02\] Kettlewell, Richard. [_C Language Gotchas_|http://www.greenend.org.uk/rjk/2001/02/cfu.html], (February 2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aa946216bbacc72b-4b1ea37b-40974398-86f58cac-722d0b58b113ad1a33287eb8"><ac:parameter ac:name="">Kettle 03</ac:parameter></ac:structured-macro>
\[Kettlewell 03\] Kettlewell, Richard. [_Inline Functions In C_|http://www.greenend.org.uk/rjk/2003/03/inline.html], (March 2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="00f09b34a8a3ff21-3d8df9b5-48c2439f-b41a92bd-6b6c6e181819e1d1f432f07d"><ac:parameter ac:name="">Kirch-Prinz 02</ac:parameter></ac:structured-macro>
\[Kirch-Prinz 02\] Ulla Kirch-Prinz, Peter Prinz. _C Pocket Reference_.  O'Reilly., November 2002, (ISBN: 0-596-00436-2).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="420eebe19995cdc3-4c372081-44fc4011-a6319323-da8bea9215ff122ad930320f"><ac:parameter ac:name="">Klein 02</ac:parameter></ac:structured-macro>
\[Klein 02\] Klein, Jack. [_Bullet Proof Integer Input Using strtol()_|http://home.att.net/~jackklein/c/code/strtol.html], (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="da55d9bf7fad7523-a62cb347-424d4fd1-99d7a9ed-475d9299d98aa1230337d464"><ac:parameter ac:name="">Koenig 89</ac:parameter></ac:structured-macro>
\[Koenig 89\]
Andrew Koenig. _C Traps and Pitfalls_. Addison-Wesley Professional, (January 1, 1989).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9511f24578db0f3d-707eaa45-45f64c03-8b2a9106-ec53cd8b9ad63a93da0c4079"><ac:parameter ac:name="">Kuhn 06</ac:parameter></ac:structured-macro>
\[Kuhn 06\] Kuhn, Markus. [_UTF-8 and Unicode FAQ for Unix/Linux_|http://www.cl.cam.ac.uk/~mgk25/unicode.html], (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b459d400f0515c57-04d6f046-4c8c4ab1-b2d7ac3d-45bab1e1876b93f403716451"><ac:parameter ac:name="">Lai 06</ac:parameter></ac:structured-macro>
\[Lai 06\] Lai, Ray. "[Reading Between the Lines|http://undeadly.org/cgi?action=article&sid=20061027031811]." _OpenBSD Journal_, October 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fbf4e2470a584ae5-63f594b5-452446e4-b574bbc5-04230058b0310989059fbaa8"><ac:parameter ac:name="">Lions 96</ac:parameter></ac:structured-macro>
\[Lions 96\] Lions, J. L. [ARIANE 5 Flight 501 Failure Report|http://en.wikisource.org/wiki/Ariane_501_Inquiry_Board_report]. Paris, France: European Space Agency (ESA) & National Center for Space Study (CNES) Inquiry Board, July 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f85a0c3d7a809a51-04bd0d75-43fb43ae-af088329-c35c654de5208d7478c22fc6"><ac:parameter ac:name="">Lockheed Martin 2005</ac:parameter></ac:structured-macro>
\[Lockheed Martin 2005\] Lockheed Martin. _Joint Strike Fighter Air Vehicle C+\+ Coding Standards for the System Development and Demonstration Program_. Document Number 2RDU00001, Rev C.  December 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="95137b68d820a8a7-17cf0a6f-47ab4108-9165bf1b-a149cfa460b7925b85b5dc66"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 01\] [_flexible array members and designators in C9X_|http://www.usenix.org/publications/login/2001-07/pdfs/mccluskey.pdf] ;login:, July 2001, Volume 26, Number 4, p. 29-32.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4c487f08e122f234-1b398a33-43b24204-a956b826-eac21a31a14d32e9f613cbdf"><ac:parameter ac:name="">mercy 06</ac:parameter></ac:structured-macro>
\[mercy\] mercy. [_Exploiting Uninitialized Data_|http://www.felinemenace.org/papers/UBehavior.zip], (January 2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="093738436128006b-d926e69d-4c2845c3-923297d4-46b9e0450974c24c4b8c25cb"><ac:parameter ac:name="">MISRA>Microsoft 04<03</ac:parameter></ac:structured-macro>
\[MISRAMicrosoft 0403\] Microsoft Security MISRA Limited. "[MISRA CBulletin MS03-026, [Buffer Overrun In RPC Interface Could Allow Code Execution (823980)|http://www.misra.org.uk/]: 2004 Guidelines for the Use of the C Language in Critical Systems." Warwickshire, UK: MIRA Limited, October 2004 (ISBN 095241564X)microsoft.com/technet/security/bulletin/MS03-026.mspx], September, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8c2e2f47a390bfe3-1b3fc293-4a824752-a85e82aa-3640cc04e737d1212dd478e0"><ac:parameter ac:name="">Microsoft 07</ac:parameter></ac:structured-macro>
\[Microsoft 07\] [C Language Reference|http://msdn2.microsoft.com/en-us/library/fw5abdx6(VS.80).aspx]., 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="45d8ae6111c134ac-375e6900-41e9482d-8e8194e8-c65b6372b44718e52c3fde28"><ac:parameter ac:name="">Murenin>MISRA  07<04</ac:parameter></ac:structured-macro>
\[MureninMISRA 0704\] ConstantineMISRA ALimited. Murenin. [cnst: 10-year-old pointer-arithmetic bug in make(1) is now gone, thanks to malloc.conf and some debugging|http://cnst.livejournal.com/24040.html]\]. June, 2007"[MISRA C|http://www.misra.org.uk/]: 2004 Guidelines for the Use of the C Language in Critical Systems." Warwickshire, UK: MIRA Limited, October 2004 (ISBN 095241564X).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7d5f02db734dba9a-24fd11d1-438e4582-b6818ddd-57f71398a0a2ccbc591bf44d"><ac:parameter ac:name="">MIT 05</ac:parameter></ac:structured-macro>
\[MIT 05\] MIT. "[MIT krb5 Security Advisory 2005-003|http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2005-003-recvauth.txt], (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3e6df3f6a56cce10-b6cd85f0-409c43aa-8d29acb6-4513f23cdeb376370286fc7c"><ac:parameter ac:name="">MITRE 07</ac:parameter></ac:structured-macro>
\[MITRE 07\] MITRE. [Common Weakness Enumeration, Draft 7|http://cwe.mitre.org/].,  October, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2badef80fad69467-08855f79-41c645b7-98edbd13-e0771cf5ff89e7e4b6372ce3"><ac:parameter ac:name="">MSDN 07</ac:parameter></ac:structured-macro>
\[MSDN 07\] MSDN. [Inheritance (Windows)|http://msdn2.microsoft.com/en-us/library/ms683463.aspx], (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="85cdce23410be566-f249b0a6-4cbb4c4f-b4a3bf20-826ae93be8ef70cbe6c9e708"><ac:parameter ac:name="">NAI>Murenin  98<07</ac:parameter></ac:structured-macro>
\[NAIMurenin 9807\] NetworkConstantine AssociatesA. IncMurenin. [Bugtraqcnst: Network Associates Inc. Advisory (OpenBSD)10-year-old pointer-arithmetic bug in make(1) is now gone, thanks to malloc.conf and some debugging|http://seclistscnst.livejournal.org/bugtraq/1998/Aug/0071com/24040.html] (1998), June 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cccfe006d9062b4b-8e1bb20d-4c304717-829c818b-96d7a4185f12d543254e6ca2"><ac:parameter ac:name="">NASA-GB-1740.13<>NAI 98</ac:parameter></ac:structured-macro>
\[NASA-GB-1740.13NAI 98\] NASANetwork GlennAssociates Research Center, Office of Safety Assurance Technologies. [_NASA Software Safety Guidebook_Inc. [Bugtraq: Network Associates Inc. Advisory (OpenBSD)|http://pbmaseclists.nasa.govorg/docsbugtraq/public1998/pbmaAug/general/guidbook0071.dochtml] (NASA-GB-1740.13)., 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d03077ec189c4baf-632b15ab-4e464655-ad4aa10b-521ec6a79bddd53fd449aac6"><ac:parameter ac:name="">NIST 06<>NASA-GB-1740.13</ac:parameter></ac:structured-macro>
\[NIST 06NASA-GB-1740.13\] NIST. [_SAMATE Reference Dataset_NASA Glenn Research Center, Office of Safety Assurance Technologies. [_NASA Software Safety Guidebook_|http://samatepbma.nistnasa.gov/SRD/docs/public/pbma/general/guidbook.doc] (2006NASA-GB-1740.13).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="92736b90dfe6d568-27dcb808-46824d70-82ee9a0e-bea5e97127928809aeba52eb"><ac:parameter ac:name="">NIST 06b<06</ac:parameter></ac:structured-macro>
\[NIST 06b06\] NIST. [DRAFT_SAMATE Source Code Analysis Tool Functional Specification. | Reference Dataset_|http://samate.nist.gov/docs/SAMATE_source_code_analysis_tool_spec_09_15_06.pdf] NIST Information Technology Laboratory (ITL), Software Diagnostics and Conformance Testing Division, September 2006.SRD/], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4c8f52d08667456c-0ca38d3f-48b848b6-a4d6804a-ea382ab8e45c80a538799efc"><ac:parameter ac:name="">Open>NIST Group 97<06b</ac:parameter></ac:structured-macro>
\[OpenNIST Group 9706b\] The Open Group. [_The Single UNIX® Specification, Version 2_|NIST. [DRAFT Source Code Analysis Tool Functional Specification. | http://wwwsamate.opengroupnist.orggov/onlinepubs/7990989775/toc.htm] (1997).docs/SAMATE_source_code_analysis_tool_spec_09_15_06.pdf] NIST Information Technology Laboratory (ITL), Software Diagnostics and Conformance Testing Division, September 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="deb01e1b88b22f7f-8226bcf1-49a14e3e-88d48053-5ed6ccbd28db75a7a724cc02"><ac:parameter ac:name="">Open Group 04<97b</ac:parameter></ac:structured-macro>
\[Open Group 0497b\] The Open Group and the IEEE. [_TheGo Solo Open2 Group- BaseThe SpecificationsAuthorized IssueGuide 6,to IEEEVersion Std 1003.1, 2004 Edition2 of the Single UNIX Specification_|http://www.opengroupunix.org/onlinepubswhitepapers/009695399/toc64bit.htmhtml] (2004), May 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cea55c768ab2f99c-682d3b15-4ec34162-a3d6bbf5-17ec974dac15c2cffa304dac"><ac:parameter ac:name="">Plakosh>Open Group 05<04</ac:parameter></ac:structured-macro>
\[PlakoshOpen Group 0504\] Plakosh, Dan The Open Group and the IEEE. _[_Consistent Memory Management Conventions_|https://buildsecurityin.us-cert.gov/daisy/bsi/articles/knowledge/coding/476.html]_ (2005)The Open Group Base Specifications Issue 6, IEEE Std 1003.1, 2004 Edition_|http://www.opengroup.org/onlinepubs/009695399/toc.htm], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="30d18bdad0f997f0-e42e233d-40634cb8-b376a4f2-5ab9969ee632c4580999c535"><ac:parameter ac:name="">Plum>Plakosh 85<05</ac:parameter></ac:structured-macro>
\[PlumPlakosh 8505\] PlumPlakosh, ThomasDan. _[_ReliableConsistent DataMemory StructuresManagement in C_. Kamuela, HI: Plum Hall, Inc., 1985 (ISBN 0-911537-04-X)Conventions_|https://buildsecurityin.us-cert.gov/daisy/bsi/articles/knowledge/coding/476.html]_, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="782bf49a51bf3410-21f0b577-4bef4fd8-a194960c-4f18478f0a5752c6f4425788"><ac:parameter ac:name="">Plum 89<85</ac:parameter></ac:structured-macro>
\[Plum 8985\] Plum, Thomas,. & Saks, Dan. _C Programming Guidelines, 2nd ed_Reliable Data Structures in C_. Kamuela, HI: Plum Hall, Inc., 19891985 (ISBN 09115370740-911537-04-X).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df0942a469e233f1-e0babebc-45b94735-9b54ab6e-572a607a7ba4419e0f466650"><ac:parameter ac:name="">Plum 91<89</ac:parameter></ac:structured-macro>
\[Plum 9189\] Plum, Thomas, & Saks, Dan. _C+\+ Programming Guidelines, 2nd ed_. Kamuela, HI: Plum Hall, Inc., 19911989 (ISBN 09115371040911537074).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="785bee5ab7b2a73d-fc44609e-4e64443d-bccd8647-a598830b2b8ea20e782d32a5"><ac:parameter ac:name="">Redwine>Plum 06<91</ac:parameter></ac:structured-macro>
\[RedwinePlum 0691\] RedwinePlum, Samuel TThomas., Jr., ed. _Secure Software Assurance: A Guide to the Common Body of Knowledge to Produce, Acquire, and Sustain Secure Software Version 1.1_. U.S. Department of Homeland Security, September 2006. See [Software Assurance Common Body of Knowledge|https://buildsecurityin.us-cert.gov/daisy/bsi/resources/dhs/95.html] on Build Security In. _C+\+ Programming_. Kamuela, HI: Plum Hall, Inc., 1991 (ISBN 0911537104).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e16fec41cfb718c7-ed1ed67f-45e44300-ba33bd4b-bcc66c29e99086241df6fd68"><ac:parameter ac:name="">Saks>Redwine 99<06</ac:parameter></ac:structured-macro>
\[SaksRedwine 9906\] SaksRedwine, Dan. "[const T vs.T const|http://www.dansaks.com/articles/1999-02%20const%20T%20vs%20T%20const.pdf]." _Embedded Systems Programming_, February 1999, pp. 13-16.Samuel T., Jr., ed. _Secure Software Assurance: A Guide to the Common Body of Knowledge to Produce, Acquire, and Sustain Secure Software Version 1.1_. U.S. Department of Homeland Security, September 2006. See [Software Assurance Common Body of Knowledge|https://buildsecurityin.us-cert.gov/daisy/bsi/resources/dhs/95.html] on Build Security In.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b4de1d8dd8632d1c-860f98c8-48c047b6-a153b343-e1bf16afcbf80d384d986d52"><ac:parameter ac:name="">Schwarz>Saks 05<07</ac:parameter></ac:structured-macro>
\[SchwarzSaks 0507\] SchwarzSaks, BDan. "[Sequence Points|http://www.embedded.com/columns/programmingpointers/9900661?_requestid=481957]" Embedded Systems Design, July 1, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e99a2f873662adab-eae5d7a2-46c247ad-9fff810e-c661529d1a3e6c1b1264bdf3"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro> <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="889a17518084327a-e7da4af0-4a8047c5-8bec9f93-185e16c71028c19bcb22920e"><ac:parameter ac:name="">Seacord 05a</ac:parameter></ac:structured-macro>
\[Seacord 05a\] Seacord, R. _Secure Coding in C and C+\+_. Boston, MA: Addison-Wesley, 2005. See [http://www.cert.org/books/secure-coding] for news and errata.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="59799163eec9a3e1-71e90c32-40b347f2-bb2491f2-499967162b5da6e24177b2d5"><ac:parameter ac:name="">Seacord 05b</ac:parameter></ac:structured-macro>
\[Seacord 05b\] Seacord, R. "Managed String Library for C, C/C++." _Users Journal_ _23_, 10 (October 2005): 30-34.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f17e17f9a246d39c-e1b021cd-45e14f08-a4089691-98114bc2bb97b15dbac35f2c"><ac:parameter ac:name="">Seacord 05c</ac:parameter></ac:structured-macro>
\[Seacord 05c\] Robert C. Seacord. [_Variadic Functions: How they contribute to security vulnerabilities and how to fix them_|http://www.cert.org/books/secure-coding/LWM%203-11%20%28Seacord%29.pdf]. Linux World Magazine.  November, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="27babb1673a5dba3-e9bc08ff-496f4b59-a87ea38c-3b1e042974216238530db576"><ac:parameter ac:name="">Spinellis 06</ac:parameter></ac:structured-macro>
\[Spinellis 06\] Spinellis, Diomidis. [_Code Quality: The Open Source Perspective_|http://www.spinellis.gr/codequality].  Addison-Wesley, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="74afc58554d73827-34f4c6c3-4d96436d-bb729113-38fe7bc03e452729d7f655f4"><ac:parameter ac:name="">Steele 77</ac:parameter></ac:structured-macro>
\[Steele 77\]  Steele, G. L. 1977. [Arithmetic shifting considered harmful.|http://doi.acm.org/10.1145/956641.956647] _SIGPLAN Not._ 12, 11 (Nov. 1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5f72b9beff0041b1-82db200f-4895479b-ac1cad8e-c6253a6b9df9ba3e65251527"><ac:parameter ac:name="">Summit 95</ac:parameter></ac:structured-macro>
\[Summit 95\] Summit, Steve. _C Programming FAQs: Frequently Asked Questions_. Boston, MA: Addison-Wesley, 1995 (ISBN 0201845199).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2255ad8cb5df56f1-f84b5c34-412e4b02-9569bd14-7b0d9ba5f5c1b69cbb03b05c"><ac:parameter ac:name="">Summit 05</ac:parameter></ac:structured-macro>
\[Summit 05\] Summit, Steve. [_comp.lang.c Frequently Asked Questions_|http://c-faq.com/], (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="07873f21e80abfee-fca7cebd-44404806-8a70a782-5b36a71388af85eb59774200"><ac:parameter ac:name="">Sun 05</ac:parameter></ac:structured-macro>
\[Sun 05\] [C User's Guide|http://docs.sun.com/source/819-3688/]. 819-3688-10. Sun Microsystems, Inc., (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="60381b8364738c8b-f28a9df3-498a4264-b9e39e87-ddcfe542b587b578fb6f0eea"><ac:parameter ac:name="">van de Voort 07</ac:parameter></ac:structured-macro>
\[van de Voort 07\] van de Voort, Marco. [Development Tutorial (a.k.a Build FAQ)|http://www.stack.nl/~marcov/buildfaq.pdf], (January 29, 2007).

\[van Sprundel 06\] van Sprundel, Ilja. [Unusual Bugs|http://ilja.netric.org/files/Unusual%20bugs.pdf] (2006). pdf], 2006. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="88ca0b6a88d8bc42-54d24e40-40ed40ea-be8e9374-b6b5c68917eae383e2d46e47"><ac:parameter ac:name="">Viega 03<05</ac:parameter></ac:structured-macro>
\[Viega 0305\] Viega, John & Messier, Matt. _Secure[CLASP ProgrammingReference CookbookGuide for C and C++: Recipes for Cryptography, Authentication, Networking, Input Validation & More_. Sebastopol, CA: O'Reilly, 2003 (ISBN 0-596-00394-3)Volume 1.1.|http://www.securesoftware.com/process/] Secure Software, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f149b6e23f9e493-74042e48-44fd4b71-9fa4a975-06175f71ddffcb4a96ded26f"><ac:parameter ac:name="">Viega 05<>VU196240</ac:parameter></ac:structured-macro>
\[Viega 05VU#196240\] ViegaTaschner, John. [CLASP Reference Guide Volume 1.1.Chris & Manion, Art. Vulnerability Note [VU#196240|http://www.securesoftware.com/process/] Secure Software, 2005kb.cert.org/vulnotes/id/196240], _Sourcefire Snort DCE/RPC preprocessor does not properly reassemble fragmented packets_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="56d7932357ebeeb6-93b0d233-4da14a5b-83918a09-6de5a2519fb4699b9dcce2ef"><ac:parameter ac:name="">VU196240<>VU286468</ac:parameter></ac:structured-macro>
\[VU#196240VU#286468\] TaschnerBurch, Chris & Manion, ArtHal. Vulnerability Note [VU#196240VU#286468|http://www.kb.cert.org/vulnotes/id/196240286468], _SourcefireEttercap Snortcontains DCE/RPCa preprocessorformat doesstring noterror properlyin reassemble fragmented packets_ (2007)the "curses_msg()" function_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="323cf7dde0aee81a-801ed45e-4b634134-89538f67-edcf9ddd89f6aef7bd8eba6e"><ac:parameter ac:name="">VU286468<>VU#551436</ac:parameter></ac:structured-macro>
\[VU#286468VU#551436\] BurchGiobbi, HalRyan. Vulnerability Note [VU#286468VU#551436|http://www.kb.cert.org/vulnotes/id/286468551436], _EttercapMozilla containsFirefox aSVG formatviewer stringvulnerable errorto in the "curses_msg()" functionbuffer overflow,_ (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c2f67a1a7ea9dd60-7ae45356-4a4c4b5c-bf8b9e42-b00265ddcd6cc34f20dc7818"><ac:parameter ac:name="">VU#551436<>VU#568148</ac:parameter></ac:structured-macro>
\[VU#551436VU#568148\] Giobbi, Ryan Finlay, Ian A. & Morda, Damon G. Vulnerability Note [VU#551436VU#568148|http://www.kb.cert.org/vulnotes/id/551436568148], _MozillaMicrosoft FirefoxWindows SVGRPC viewer vulnerable to buffer overflow_, (2007)2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f310e1283ac3c29f-8e2ded04-424e4542-86f1b6ef-bdf5e47c8ff9be963df0866d"><ac:parameter ac:name="">VU623332</ac:parameter></ac:structured-macro>
\[VU#623332\] Mead, Robert. Vulnerability Note [VU#623332|http://www.kb.cert.org/vuls/id/623332], _MIT Kerberos 5 contains double free vulnerability in "krb5_recvauth()" function,_ (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="44cbc030211bf81a-ecbd4741-459d4d1d-9de39a78-f95dbb52979e534c6641ddd1"><ac:parameter ac:name="">VU649732</ac:parameter></ac:structured-macro>
\[VU#649732\] Gennari, Jeff. Vulnerability Note [VU#649732|http://www.kb.cert.org/vulnotes/id/649732], _Samba AFS ACL mapping VFS plug-in format string vulnerability,_ (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="231a8e425cee4d98-6d3845bf-4ec540f8-a16a92dc-5f5cbd08af2c9fd51a639709"><ac:parameter ac:name="">VU743092</ac:parameter></ac:structured-macro>
\[VU#743092\] Jason A. Rafail; Jeffrey S. Havrilla.  Vulnerability Note [VU#743092|https://www.kb.cert.org/vulnotes/id/743092], _realpath(3) function contains off-by-one buffer overflow,_. July, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="32eef3b1e05c995b-2fa30651-4b7144d9-ae91bf17-93162050245fd47a1eced698"><ac:parameter ac:name="">VU881872</ac:parameter></ac:structured-macro>
\[VU#881872\] Manion, Art & Taschner, Chris. Vulnerability Note [VU#881872|http://www.kb.cert.org/vulnotes/id/881872], _Sun Solaris telnet authentication bypass vulnerability,_ (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0e58ee10e99abc7f-c4589965-4425428e-a41a83c2-00f5f0027313d54b47fdf973"><ac:parameter ac:name="">Warren 02</ac:parameter></ac:structured-macro>
\[Warren 02\] Warren, Henry S. [_Hacker's Delight_|http://www.hackersdelight.org/]. Boston, MA: Addison Wesley Professional, 2002 (ISBN 0201914654).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8f81805e293734b0-a451831a-4b674b69-8386b4a7-a1b1555c5b9d95e01d482ac1"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 03\] Wheeler, David. [Secure Programming for Linux and Unix HOWTO, v3.010 |http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/], (March 2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="298a2d3e9d440b1d-ba9a2a99-42644958-aa28880b-f11f8ef5686913bd8056d92a"><ac:parameter ac:name="">Yergeau 98</ac:parameter></ac:structured-macro>
\[Yergeau 98\] Yergeau, F. [RFC 2279 - UTF-8, a transformation format of ISO 10646|http://www.faqs.org/rfcs/rfc2279.html], (January 1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eb5605253dfa7262-f5b28128-418347b2-b1b4a58d-469120ec111b0590ebb4ae00"><ac:parameter ac:name="">Zalewski 01</ac:parameter></ac:structured-macro>
\[Zalewski 01\] Michal Zalewski. [_Delivering Signals for Fun and Profit: Understanding, exploiting and preventing signal-handling related vulnerabilities_|http://lcamtuf.coredump.cx/signals.txt],  May, 2001.