| Re: [AD] Buffer security patch |
[ Thread Index |
Date Index
| More lists.liballeg.org/allegro-developers Archives
]
On Wednesday 19 May 2004 15:30, aj wrote:
> please can you educate me to this flaw, i am still using strncpy() but am
> still concerned about buffer issues.
strncpy() always writes precisely the number of bytes you pass to it. If
possible, those bytes are all taken from the source string. If the source
string is too short, then zeros are written.
An upshot is that if the source string is too long, the destination buffer
will not contain a NUL byte at the end, so the string will be unterminated.
Ben