[Cryptography] It's all K&R's fault

Patrick Chkoreff patrick at rayservers.net
Sat Apr 19 17:36:18 EDT 2014


Peter Fairbrother wrote, On 04/18/2014 04:54 PM:

> There have been eleventy-million kinds of whining about this here, and
> twenty-leven-million mostly-non-fixes, but who has said, or better
> insisted, that eg strcpy() etc should be permanently removed from C, and
> replaced with a bounds-checking version?
> 
> Because *that* is what is needed. Nothing else will do.


Or just avoid the dangerous stuff and write your own bounds-checked
functions in C:

https://github.com/chkoreff/Fexl/blob/fresh/src/str.c#L45


-- Patrick



More information about the cryptography mailing list