Linked by Eugenia Loli on Mon 5th Dec 2005 05:39 UTC
General Development Strings - such as command-line arguments, environment variables, and console input - are of special concern in secure programming because they comprise most of the data exchanged between an end user and a software system. This chapter covers the security issues with strings and how you can sidestep them.
Permalink for comment 68840
To read all comments associated with this story, please click here.
RE[2]: Toolkits
by Richard James on Mon 5th Dec 2005 08:19 UTC in reply to "RE: Toolkits"
Richard James
Member since:
2005-07-07

C development (of the language, not in the language) is pretty much deprecated and replaced by C++. This is why these things have never been fixed. Someone really needs to sit down and write a new C specification and stop expecting developers to not use C because somewhere, somebody is programming in it right now.

Saying that the developers should change to another language or that they should use other libraries to make safe code is stupid, because it is not going to happen. People write in C because it works for their project, not because they have never seen another language before.

Reply Parent Score: 2