Bugtraq mailing list archives

Re: at the risk of another flamefest..


From: alan () ez0 ezlink com (Alan L. Wendt)
Date: Tue, 16 Jul 1996 00:37:37 -0600



If I may fan the flames further... I often wonder if we should blame
our Language of Choice, rather than bad programming practice.  It
seems to me that the bulk of code-based security problems these days
are buffer overflow-related.  Is this characteristic of poor coding,
or a misfeature of C?


I would vote for the standard library calls.   A library function that
accepts a pointer to a buffer area that is going to get written into,
without requiring a size parameter, is a travesty of two mockeries of a sham.

Alan



Current thread: