Re: Are bad developer libraries the problem with M$ software?

• Original Message ----- From: John Viega Sent: 11/18/2002 2:28:08 PM To: cdavison@nucleus.com Cc: secprog@securityfocus.com Subject: Re: Are bad developer libraries the problem with M$ software?

> strlen does not work, because he was trying to get at the ALLOCATED

You're right. I was looking at the safe_strncpy code, and it looks like the author did use strlen.

> sizeof will return the size of the data type passed to it. So if you

It will not work with a char*, so if your strings are dynamically allocated, or passed to you as a pointer, these macros will not work. Received on Wed Nov 20 07:24:40 2002