On Wed, Aug 11, 2004 at 07:32:54PM +0000, Thordur Ivar B. wrote: > While porting software from a friend wich was developed under Linux, I stumbled > upon an error: src/socket.c:236: warning: implicit declaration of function > `strnlen' > > Now my programming experience is nothing to brag about but I wonder why strnlen > is not a part of FreeBSD's libc. I think that the use of strlen() insted of > strnlen() could resault in buffer-overflow risks and my fellows (most of them > are more experienced in the art of programming say that bounds checking is > always good.)
That's not a standard function outside the Linux world, and it's not very necessary for security..no matter how you calculate the string size, you still have to have your brain engaged when you copy it into the destination buffer. Kris
pgphc0uTWlMh5.pgp
Description: PGP signature
