DragonFly BSD
DragonFly kernel List (threaded) for 2003-12
[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]

RE: More thinking securely...


From: Matthew Dillon <dillon@xxxxxxxxxxxxxxxxxxxx>
Date: Wed, 10 Dec 2003 11:52:19 -0800 (PST)

:
:>     'safe' situations where old functions are used (like
:>     sprintf(buf, "%d", v)), simply because then the audited 
:
:Safe?
:
:	char buf[8];
:	sprintf(buf, "%d", v);
:
:> 

    If 'v' is a short :-)

    Most programmers don't make that mistake.. that is, it isn't a common
    mistake.  A more common mistake is to use strcpy() and strcat() without
    checking for possible overflows.

					-Matt
					Matthew Dillon 
					<dillon@xxxxxxxxxxxxx>



[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]