[oofabz]

I recommend bstring for length-prefixed strings in C:

http://bstring.sourceforge.net/

[clarry]

Bstring relies on undefined behavior for security. Don't use it if you care about security.