Secure Coding mailing list archives

Re: Scripting Languages and Secure Coding


From: ljknews <ljknews () mac com>
Date: Sat, 06 Dec 2003 17:08:48 +0000

At 1:43 PM +1100 12/5/03, Louis Solomon [SteelBytes] wrote:
The C compiler and popular C library routines do not have bugs

If you think this you are deluding yourself.  No body of code as large
as either is bug-free.

acutally that's a good point if you think of it loosely ...
think of all of those unsafe string funcs that cause many of the current
buffer overflows probs.

But that is a natural consequence of choosing C with it's null terminated
(rather than counted) strings.








Current thread: