Skip to Content
Secure Coding in C and C++
book

Secure Coding in C and C++

by Robert C. Seacord
September 2005
Intermediate to advanced
368 pages
9h 14m
English
Addison-Wesley Professional
Content preview from Secure Coding in C and C++

Chapter 2 Strings

with Dan Plakosh and Jason Rafail1

1. Daniel Plakosh is a senior member of the technical staff for the Software Engineering Institute (SEI) Networked Systems Survivability Program. Jason Rafail is a member of the technical staff for the SEI Networked Systems Survivability Program.

But evil things, in robes of sorrow,Assailed the monarch’s high estate.

—Edgar Allan Poe“The Fall of the House of Usher”

Strings—such as command-line arguments, environment variables, and console input—are of special concern in secure programming because they comprise most of the data exchanged between an end user and a software system. Graphic and Web-based applications make extensive use of text input fields and, because of standards like XML, ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Secure Coding in C and C++, Second Edition

Secure Coding in C and C++, Second Edition

Robert C. Seacord

Publisher Resources

ISBN: 9780768685923Purchase book