Safe C String Library v1.0.3 (January 30, 2005)

Safe C String Library v1.0.3 (January 30, 2005)
(c) Copyright 2003-2005 Matt Messier and John Viega

The goal of the SafeStr library is to provide a rich string-handling library for C that has safe semantics yet interoperates with legacy library code in a straightforward manner. Additionally, porting code that uses standard C string handling should be straightforward. The library should work on all modern Unix-like platforms, as well as any 32-bit Microsoft Windows OS.

The overt security goals of the library are as follows:

Buffer overflows should not be possible when using the API.
Format string problems should be impossible when using the API.
The API should be capable of tracking whether strings are "trusted", a la Perl's taint mode.

The API is meant to provide rich functionality and be easy to use, all the while improving security.