DragonFly BSD
DragonFly kernel List (threaded) for 2003-12
[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]

Re: More thinking securely...

From: "Max Laier" <max@xxxxxxxxxxxxxx>
Date: Wed, 10 Dec 2003 00:19:02 +0100

> :Would there be any value (right now) in moving away from unsafe/unbounded
> :string functions like OpenBSD (ex. strcopy->strlcpy) and the like?
> :
> :Cheers,
> :Ryan
>     Yes, there is definitely value in this sort of work, even for the
>     'safe' situations where old functions are used (like
>     sprintf(buf, "%d", v)), simply because then the audited and changed
>     functions will not show up in people's grep's for old functions
>     any more :-)
>     But the work must definitely be reviewed.  For every 50 string
>     you replace you have a good chance at introducing 1 new bug :-)
> -Matt
> Matthew Dillon
> <dillon@xxxxxxxxxxxxx>

strl{cpy,cat} are not yet in the kernel, IIRC. Will we have them in a
libkern of some sort? Sure one can use the *nprint class functions, but
there is a point in the OpenBSD way and 5.x as well as NetBSD have binary
versions in the kernel.


-Max <max@xxxxxxxxxxxxxx>

[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]