No need for AV tools on Linux, eh?

James McKenzie jjmckenzie51 at earthlink.net
Sat Feb 19 02:01:08 UTC 2011


On 2/18/11 4:00 PM, Joe Zeff wrote:
> On 02/18/2011 02:44 PM, Ian Malone wrote:
>> Used properly, yes you've avoided buffer overruns, used badly no.
>> strncpy(dest,src,strlen(src)+1)
>> Ridiculous? Yes. Never used in practice? I'd like to believe it.
>> strncpy has been in C since it was first standardised, but people
>> still write code that overflows.
> This is what code review is for.
+1.  I used to get paid to do this and you would not believe the coding 
mistakes I found.

James McKenzie


More information about the users mailing list