Page Information

Title:	STR03-C. Do not inadvertently truncate a string
Author:	Admin	Aug 23, 2006
Last Changed by:	Jill Britton	Jul 24, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/D9cxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (1)     Page: STR31-C. Guarantee that storage for strings has sufficient space for character data and the null terminator

Parent Page     Page: Rec. 07. Characters and Strings (STR)

• rose-false-positive
• ldra
• fortify
• compass/rose
• android-applicable
• exceptions
• tr24731
• recommendation
• str
• klocwork

Time	Editor
Jul 24, 2025 10:56	Jill Britton	View Changes
Jun 16, 2025 15:23	Richard W. Laughlin	View Changes
Removed references to Annex K.
May 20, 2025 07:48	Jill Britton	View Changes
REM Cost Reform
Apr 27, 2022 08:44	Jill Britton	View Changes
Aug 30, 2019 17:42	Anirban Gangopadhyay

External Links (11)
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    cwe.mitre.org/data/definitions/170.html
    https://www.securecoding.cert.org/confluence/display/seccod…
    https://www.mathworks.com/help/bugfinder/ref/certcrec.str03…
    gcc.gnu.org
    cwe.mitre.org/data/definitions/464.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/
    https://gcc.gnu.org/onlinedocs/gcc/Warning-Options.html#ind…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT C Coding Standard (17)     Page: Parasoft_V     Page: Klocwork_V     Page: Rose     Page: CodeSonar     Page: CodeSonar_V     Page: Helix QAC_V     Page: STR32-C. Do not pass a non-null-terminated character sequence to a library function that expects a string     Page: LDRA_V     Page: Parasoft     Page: BB. Definitions     Page: Klocwork     Page: Helix QAC     Page: LDRA     Page: Polyspace Bug Finder     Page: AA. Bibliography     Page: Polyspace Bug Finder_V     Home page: SEI CERT C Coding Standard

SEI CERT C++ Coding Standard (2)     Page: VOID STR03-CPP. Do not inadvertently truncate a null-terminated character array     Home page: SEI CERT C++ Coding Standard