Page Information

Title:	STR32-C. Do not pass a non-null-terminated character sequence to a library function that expects a string
Author:	Robert C. Seacord	May 25, 2006
Last Changed by:	Joerg Herter	Oct 29, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/r9UxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (2)     Page: STR11-C. Do not specify the bound of a character array initialized with a string literal     Page: STR03-C. Do not inadvertently truncate a string

Parent Page     Page: Rule 07. Characters and Strings (STR)

• compass/rose
• nptc
• android-applicable
• cwe-170
• rose-partial
• tr24731
• rule
• str
• cwe-119
• klocwork
• nptc-aliasing
• nptc-complexity
• in-cpp

Time	Editor
Oct 29, 2025 06:02	Joerg Herter	View Changes
Aug 06, 2025 14:02	Francesco Mariani	View Changes
May 29, 2025 10:07	Richard W. Laughlin	View Changes
Removed references to Annex K.
May 05, 2025 08:51	Swasti Shrivastava	View Changes
REM Cost Reform
Apr 14, 2025 12:58	David Svoboda
UB 196

External Links (16)
    https://cwe.mitre.org/data/definitions/125.html
    cwe.mitre.org/data/definitions/170.html
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://cwe.mitre.org/data/index.html
    https://www.mathworks.com/help/bugfinder/ref/certcrulestr32…
    https://cwe.mitre.org/data/definitions/123.html
    https://pvs-studio.com/en/docs/warnings/v692/
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/How+this+Codi…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/data/definitions/119.html
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://wiki.sei.cmu.edu/confluence/display/c/PVS-Studio
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT C Coding Standard (33)     Page: TrustInSoft Analyzer     Page: Coverity     Page: Rose     Page: CC. Undefined Behavior     Page: Coverity_V     Page: Helix QAC_V     Page: RuleChecker_V     Page: Cppcheck Premium     Page: Cppcheck Premium_V     Page: Security Reviewer - Static Reviewer_V     Page: BB. Definitions     Page: Klocwork     Page: LDRA_V     Page: Parasoft     Page: AA. Bibliography     Page: LDRA     Page: CodeSonar     Page: Polyspace Bug Finder_V     Page: STR11-C. Do not specify the bound of a character array initialized with a string literal     Page: TrustInSoft Analyzer_V     Page: Axivion Bauhaus Suite     Page: Parasoft_V     Page: Klocwork_V     Page: CodeSonar_V     Page: Astrée     Page: Security Reviewer - Static Reviewer     Page: PVS-Studio_V     Page: RuleChecker     Page: Polyspace Bug Finder     Page: Helix QAC     Page: Axivion Bauhaus Suite_V     Page: Astrée_V     Home page: SEI CERT C Coding Standard