This is the mail archive of the
libc-alpha@sources.redhat.com
mailing list for the glibc project.
Re: tmpnam v mkstemp
- To: eggert at twinsun dot com
- Subject: Re: tmpnam v mkstemp
- From: Geoff Keating <geoffk at geoffk dot org>
- Date: Sat, 11 Nov 2000 14:29:10 -0800
- CC: Neale dot Ferguson at softwareAG-usa dot com, libc-alpha at sources dot redhat dot com
- References: <200011112123.NAA29769@cygnus.com> <200011112147.NAA00656@geoffk.org> <200011112211.OAA04899@sic.twinsun.com>
- Reply-to: Geoff Keating <geoffk at redhat dot com>
> Date: Sat, 11 Nov 2000 14:11:01 -0800 (PST)
> From: Paul Eggert <eggert@twinsun.com>
> Does libc also warn about the use of functions like `strcpy' and
> `gets' at link time? They are security holes as well, if used
> incorrectly.
I believe it warns about 'gets', but not about 'strcpy'. The
justification is that 'gets' is almost always a problem but the same
is not true for 'strcpy'.
--
- Geoffrey Keating <geoffk@geoffk.org>