Author: robert Date: 2008-10-24 20:39:55 -0600 (Fri, 24 Oct 2008) New Revision: 1461
Modified: branches/Onward/temporary_system/glibc.txt Log: Make the strlcat/strlcpy Glibc patch discription split http urls so they're easier to copy and paste, for web broswers. Modified: branches/Onward/temporary_system/glibc.txt =================================================================== --- branches/Onward/temporary_system/glibc.txt 2008-10-25 00:50:50 UTC (rev 1460) +++ branches/Onward/temporary_system/glibc.txt 2008-10-25 02:39:55 UTC (rev 1461) @@ -34,25 +34,29 @@ patch -p1 -i ../glibc-2.8-sanitize_env.diff && -# This patch adds the strlcpy and strlcat functions and manual pages to Glibc. -# A paper written about these functions is available here: -# http://www.courtesan.com/todd/papers/strlcpy.html. The Glibc project has -# refused to add these functions, and that mail tread starts here: -# http://sources.redhat.com/ml/libc-alpha/2000-08/msg00052.html. Linus Torvalds -# has added a similar function to the Linux kernel, and that mail thread is -# here: http://lwn.net/Articles/33814/. The strlcpy() and strlcat() functions -# are replacements for strncpy() and strncat(). The controversy of these -# functions is that strlcpy() and strlcat() copy the source data to the -# destination buffer until the destination is full, and discards the rest of -# the data if there is any. This means that these functions will never -# overflow. The basis for the Glibc team's refusal to add these functions is -# that they silently hide programing errors, and they have a higher performance -# hit than strncpy() and strncat(). These functions should not be needed in a -# perfect world, but were invented to deal with the real world. Many packages -# will use these functions if they are found, such as Perl and many BLFS -# packages. These functions do reduce buffer overflows, and so they are -# recommended. After installing this patch no other effort is needed to use it. -# Packages will use autotools to detect whether they are available or not: +# This patch adds the strlcpy(3) and strlcat(3) functions and manual pages to +# Glibc. A paper written about these functions is available here: +# http://www.courtesan.com/todd/papers/strlcpy.html +# The Glibc project has refused to add these functions, and that mail tread +# starts here: +# http://sources.redhat.com/ml/libc-alpha/2000-08/msg00052.html +# Linus Torvalds has added a similar function to the Linux kernel, and that +# mail thread is here: +# http://lwn.net/Articles/33814/ +# The strlcpy(3) and strlcat(3) functions are replacements for strncpy(3) and +# strncat(3). The controversy of these functions is that strlcpy(3) and +# strlcat(3) copy the source data to the destination buffer until the +# destination is full, and discards the rest of the data, if there is any. +# This means that these functions will never overflow, but they ignore what +# would have been an overflow. The basis for the Glibc team's refusal to add +# these functions is that they silently hide programing errors, and they have +# a higher performance impact than strncpy(3) and strncat(3). These functions +# should not be needed in a perfect world, but were invented to deal with the +# real world. Many packages will use these functions if they are found, such +# Perl and many BLFS packages. These functions do reduce buffer overflows, and +# so they are recommended. After installing this patch no other effort is +# needed to use them. Packages will use autotools to detect whether they are +# available or not. Apply this patch with the following command: patch -p1 -i ../glibc-2.8-strlcpy_strlcat.diff && -- http://linuxfromscratch.org/mailman/listinfo/hlfs-book FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page
