Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Secure Programming
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Are bad developer libraries the problem with M$ software? Nov 18 2002 11:22PM
Andrew Griffiths (andrewg d2 net au)
Frank Knobbe wrote:
> On Mon, 2002-11-18 at 17:10, Andrew Griffiths wrote:
>
>
>>Another thing to use is consistency, for example,
>>

> Of course in your example you allow dst to overflow in the strncpy.
> Using
> strncpy(dst, user_supplied_data, sizeof(dst)-1);
> would have prevented that if ...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus