strlcpy and strlcat--Consistent, Safe, String Copy and Concatenation


Published: Apr 08, 2000 Updated: Apr 08, 2000 Section: Network Security Library :: Auditing Author: Todd C. Miller Printable Version Adjust font size: Rating: 3/5 - 1 Votes 1 2 3 4 5

As the prevalence of buffer overflow attacks has increased, more and more programmers are using size or length-bounded string functions such as strncpy() and strncat(). While this is certainly an encouraging trend, the standard C string functions generally used were not really designed for the task. This paper describes an alternate, intuitive, and consistent API designed with safe string copies in mind.

Click Here to download this article