LWN.net Logo

CERT C Secure Coding Standard: last call for reviewers

CERT C Secure Coding Standard: last call for reviewers

Posted Mar 15, 2008 5:15 UTC (Sat) by PO8 (guest, #41661)
In reply to: CERT C Secure Coding Standard: last call for reviewers by ajross
Parent article: CERT C Secure Coding Standard: last call for reviewers

I think the point of this example is that you *can't* count on your program to crash at the
point of the failed malloc().  Having "/* Handle Error */" be "abort()" is OK---assuming that
strcpy() or whatever will magically abort() for you is not.  If the program *doesn't* crash or
handle the error at this point, you have all kinds of potential security vulnerabilities...


(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds