Home/CWE/Improper Null Termination
Weakness

Improper Null Termination

CWE-170 · Base · Incomplete

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.

Extended description

Null termination errors frequently occur in two different ways. An off-by-one error could cause a null to be written out of bounds, leading to an overflow. Or, a program could use a strncpy() function call incorrectly, which prevents a null terminator from being added at all.

Other scenarios are possible.

External lookups - second-class, for what we don’t hold ourselves