Re: FreeBSD security auditing project.

[Kris Kennaway]

On Wed, 24 Nov 1999, Peter Jeremy wrote:

> >> o unsafe use of the str*(3) functions; strcat/strcpy/sprintf &c.
> >
> >I wonder how many instances of the potentially unsafe functions there are
> >in the source tree? :)
> 
> A 'grep | wc' equivalent over the source tree gives:
> 
> gets        110
> strcat     2860
> strcpy     4717
> strncat     167
> strncpy    1514
> sprintf    6839
> vsprintf    133

*ouch* :-)

> And these are the easy ones...

Indeed :-(

Kris

----
Cthulhu for President! For when you're tired of choosing the _lesser_ of
two evils..



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message