Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Secure Programming
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Are bad developer libraries the problem with M$ software? Nov 18 2002 09:46PM
Frank Knobbe (fknobbe knobbeits com)
On Mon, 2002-11-18 at 12:54, John Viega wrote:

> > #define safe_strcat(dst,src)
> > strncat(dst,src,sizeof(dst))
>
> This is NOT safe or even close to correct. There are two big problems
> here:
>
> 1) sizeof(dst) is very often going to be sizeof(char *) which is 2, no matter
> how much ...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus