Re: safe strcpy()?

Michal Zalewski wrote:

>[encoding buffer size with the buffer]
>
>
>I'm pretty convinced I've seen at least a discussion about such an
Not sure if this is what you're referring to ... DJB (Dan Bernstein) built a string manipulation library as part of his qmail implementation. This string library *completely* disposes of C's null-terminated string idiom in favor of strings being an object that contains base and bounds information. This has the advantage of being much safer (strcpy really does know the destination size, and will not overflow it) and the disadvantage of being more-or-less completely incompatible with current C code.

Crispin

-- 
Crispin Cowan, Ph.D.
Chief Scientist, WireX                      
http://wirex.com/~crispin/
Security Hardened Linux Distribution:       
http://immunix.org
Available for purchase: 
http://wirex.com/Products/Immunix/purchase.html
			    Just say ".Nyet"