Page Information

Title:	STR06-C. Do not assume that strtok() leaves the parse string unchanged
Author:	glook	Apr 07, 2007
Last Changed by:	Anirban Gangopadhyay	Oct 01, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/v9UxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (1)     Page: MSC24-C. Do not use deprecated or obsolescent functions

Parent Page     Page: Rec. 07. Characters and Strings (STR)

• fortify
• compass/rose
• android-applicable
• rose-partial
• recommendation
• str

Time	Editor
Oct 01, 2025 12:20	Anirban Gangopadhyay	View Changes
May 20, 2025 07:49	Jill Britton	View Changes
REM Cost Reform
Apr 20, 2023 06:27	Jill Britton	View Changes
Apr 26, 2021 04:14	Jill Britton	View Changes
Apr 21, 2021 05:24	Jill Britton

External Links (9)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.mathworks.com/help/releases/R2025a/bugfinder/re…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    www.kernel.org/doc/man-pages/online/pages/man3/strtok.3.htm…
    cwe.mitre.org/
    cwe.mitre.org/data/definitions/464.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/Polyspace+Bug…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT C Coding Standard (11)     Page: ENV30-C. Do not modify the object referenced by the return value of certain functions     Page: CodeSonar     Page: Helix QAC     Home page: SEI CERT C Coding Standard     Page: Rose     Page: CodeSonar_V     Page: LDRA_V     Page: Helix QAC_V     Page: Polyspace Bug Finder_V     Page: LDRA     Page: AA. Bibliography

SEI CERT C++ Coding Standard (2)     Home page: SEI CERT C++ Coding Standard     Page: VOID STR06-CPP. Do not assume that strtok() leaves the parse string unchanged