Re: Standards for developing secure software
On Sat, Jan 25, 2003 at 11:48:29PM +1100, jasonk wrote:
> > What if the string length is negative? (and yes, I've seen a C
> strlen()
The length is an integer value, it doesn't contain letters nor numbers,
it's not a string, just a value.
> Isn't this the whole point of the exercise? Catch everything you need
And check everything you do catch.
Regards,
Luciano Rocha
--
Consciousness: that annoying time between naps.
Received on Mon Jan 27 16:08:09 2003
This archive was generated by hypermail 2.1.8
: Wed Aug 23 2006 - 14:02:45 EDT
|