| |||||||||||||
The ups and downs of strlcpy()The ups and downs of strlcpy()Posted Jul 20, 2012 18:29 UTC (Fri) by quotemstr (subscriber, #45331)In reply to: The ups and downs of strlcpy() by jimparis Parent article: The ups and downs of strlcpy()
> it's likely better to truncate "Jimparis the magnificent" to just "Jimparis the magni"
If you want that behavior, you can ask for it. If the programmer doesn't specify, the safer thing to do is abort. You'll notice an abort and fix it fast. You might not notice a truncation vulnerability until it's too late.
(Log in to post comments)
|
|||||||||||||