RE: New Microsoft Security Tool for developers

[Örjan Petersson <nospam () logcode com>]

Jannie Hanekom wrote:
> I've been following this more as an enthusiast than a professional
> developer, but isn't there potential for information leakage with that
> code?  It always copies 9 bytes of data, regardless of the length of
> str, meaning it can potentially place information in buffer that
wasn't
> in str in the first place.

No, strncpy(s1, s2, n) copies *at most* n characters from s2 to s1.
Characters that follow a null character in s2 are not copied.
-- 
Örjan Petersson, Logcode SARL
The email address in the From: header is valid