Page Information

Title:	ENV01-C. Do not make assumptions about the size of an environment variable
Author:	Jeffrey Gennari	Apr 24, 2007
Last Changed by:	Jill Britton	Jul 24, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/3NUxBQ
Export As:	Word · PDF

Parent Page     Page: Rec. 10. Environment (ENV)

• compass/rose
• cwe-807
• android-applicable
• env
• rose-complete
• recommendation
• cwe-119

Time	Editor
Jul 24, 2025 11:05	Jill Britton	View Changes
May 20, 2025 08:30	Jill Britton	View Changes
REM Cost Reform
Jun 30, 2022 11:03	Jill Britton	View Changes
Apr 27, 2022 06:23	Jill Britton	View Changes
Feb 28, 2021 15:34	Kris Kafka
Added PC-lint Plus to Automated Detection Table

External Links (8)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://cwe.mitre.org/data/definitions/125.html
    cwe.mitre.org/data/definitions/119.html
    https://cwe.mitre.org/data/definitions/123.html
    https://www.mathworks.com/help/bugfinder/ref/certcrec.env01…
    cwe.mitre.org/
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT C Coding Standard (17)     Page: Rose     Page: Klocwork_V     Page: Klocwork     Page: Parasoft_V     Page: PC-lint Plus     Page: Parasoft     Page: CodeSonar_V     Page: Polyspace Bug Finder     Page: Helix QAC     Page: PC-lint Plus_V     Page: AA. Bibliography     Page: Helix QAC_V     Page: CodeSonar     Page: BB. Definitions     Page: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator     Page: Polyspace Bug Finder_V     Home page: SEI CERT C Coding Standard