Secure Programming
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
Re: Are bad developer libraries the problem with M$ software?
Nov 18 2002 09:46PM
Frank Knobbe (fknobbe knobbeits com)
On Mon, 2002-11-18 at 12:54, John Viega wrote:
> > #define safe_strcat(dst,src)
> > strncat(dst,src,sizeof(dst))
>
> This is NOT safe or even close to correct. There are two big problems
> here:
>
> 1) sizeof(dst) is very often going to be sizeof(char *) which is 2, no matter
> how much ...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
> > #define safe_strcat(dst,src)
> > strncat(dst,src,sizeof(dst))
>
> This is NOT safe or even close to correct. There are two big problems
> here:
>
> 1) sizeof(dst) is very often going to be sizeof(char *) which is 2, no matter
> how much ...
[ more ]