String Function Differences
This topic describes differences among string functions used in handling Unicode and character set information. These functions have both Unicode and Windows code page implementations to support Unicode and Windows code page parameters.
The following string functions do not require special comment. Their Unicode and Windows code page implementations work identically.
- StringCchCat, StringCchCatEx
- StringCchCopy, StringCchCopyEx
- StrCbLength, StrCchLength
The length value retrieved by one of the string length functions is always based on normal character width: 8 bits for Windows code pages, 16 bits for Unicode. This value is often referred to as a "count of characters." This term is strictly correct because Windows code pages that use double-byte character sets (DBCSs) have some full-width characters that are actually represented by two consecutive bytes. A similar situation arises for surrogates in Unicode.
The following string functions are sensitive to the locale of the current thread, derived from the language the user selects in the Control Panel. The lstrcmp and lstrcmpi functions do not perform byte comparisons like their ANSI namesakes, for example, strcmp. Instead, they compare strings according to the rules of the locale.
The following functions convert between the OEM character set and either the current Windows code page or Unicode, depending on which version is used:
The print functions, for example, StringCbPrintf, support Unicode by providing the following new and changed data types in their format specifications. These format specifications affect the way the functions interpret the corresponding input parameter.
|Format specification||Data type for Windows code page version||Data type for Unicode version|
The data type for the output text always depends on the version of the function. When the data type of the input parameter and the data type of the output text do not agree, the print function performs a conversion from Unicode to the current Windows code page, or vice versa, as required.
For the Unicode version of the print functions, the format string is Unicode, as is the output text.
Poor buffer handling is implicated in many security issues that involve buffer overruns. See Strsafe.h Reference. The functions defined in Strsafe.h provide additional processing for proper buffer handling in your code. For this reason, they are intended to replace their built-in C/C++ counterparts as well as specific Microsoft Windows implementations. For more information, see Security Considerations: International Features.