No need for AV tools on Linux, eh?

Joe Zeff joe at zeff.us
Fri Feb 18 23:00:01 UTC 2011


On 02/18/2011 02:44 PM, Ian Malone wrote:
> Used properly, yes you've avoided buffer overruns, used badly no.
> strncpy(dest,src,strlen(src)+1)
> Ridiculous? Yes. Never used in practice? I'd like to believe it.
> strncpy has been in C since it was first standardised, but people
> still write code that overflows.

This is what code review is for.


More information about the users mailing list