Re: Secure coding in C (was Re: Administrivia #4883)

[imp () VILLAGE ORG (Warner Losh)]

In message <Pine.LNX.4.03.10001161207550.7428-100000 () brian citynet net> Brian Masney writes:
: On some UNIX systems, snprintf does not guarentee that it will nul
: terminate the string. I know on some older versions of libc5 (sorry,
: don't have an exact version), if the buffer you was writing to got to the
: max size you passed it, it would stop there without adding the nul. So,
: you'll run into problems later on if you pass it to a string
: function (like strcpy())

snprintf is *DEFINED* to NUL terminate the string.  Systems that don't
do this are broken.  That's why it is used as widely as it is.

Warner