On Fri, Jun 17, 2005 at 01:20:14AM +0200, Ulf Harnhammar wrote:
> * strncat(buf2, buf, sizeof(buf2))
buf[sizeof(buf)] = '\0'; is a bad but common idiom as well. We could
go into more detail and describe that strcpy(), strcat() and sprintf()
sometimes lead to buffer overflows, but then the readers will have to
deal with many false positives.
// Ulf
Received on Fri Jun 17 2005 - 00:50:03 BST