version 1.11, 2003/09/04 16:24:30 |
version 1.12, 2003/09/04 16:39:26 |
|
|
<li>Many unsafe string functions have been removed from the kernel and userland |
<li>Many unsafe string functions have been removed from the kernel and userland |
utilities. This audit is one of the most comprehensive OpenBSD has ever |
utilities. This audit is one of the most comprehensive OpenBSD has ever |
done, with thousands of occurrences of |
done, with thousands of occurrences of |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strcpy">strcpy(3)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strcpy">strcpy(3)</a>, |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strcat">strcat(3)</a>, |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sprintf">sprintf(3)</a>, |
and |
and |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strcat">strcat(3)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vsprintf">vsprintf(3)</a> |
being replaced with safer, bounded alternatives such as |
being replaced with safer, bounded alternatives such as |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy"> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy">strlcpy(3)</a>, |
strlcpy(3)</a> and |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcat">strlcat(3)</a>, |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcat"> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snprintf">snprintf(3)</a>, |
strlcat(3)</a>. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vsnprintf">vsnprintf(3)</a>, |
|
and |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=asprintf">asprintf(3)</a>. |
<p> |
<p> |
|
|
<li>Support for |
<li>Support for |