Hacker News new | past | comments | ask | show | jobs | submit login

Quick grep on linux-2.6.37.3:

strcpy -> 2864

strncpy -> 894




how many times is strlcpy used? This bug was fixed with strlcpy:

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6...



Fortunately, Ulrich Drepper doesn't work on the kernel. Otherwise we would all have to pay money to open bug reports[1]

His preferred solution is to use the highly portable

  *((char *) mempcpy (dst, src, n)) = '\0';
make of that what you will…

[1] http://sourceware.org/bugzilla/show_bug.cgi?id=4980


strlcpy -> 1063


strncpy isn't always better. It's just as easy to misuse strncpy as it is to properly sanitize strcpy inputs.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: