Re: at the risk of another flamefest..

>
> If I may fan the flames further... I often wonder if we should blame
> our Language of Choice, rather than bad programming practice. It
> seems to me that the bulk of code-based security problems these days
> are buffer overflow-related. Is this characteristic of poor coding,
> or a misfeature of C?
>

I would vote for the standard library calls. A library function that
accepts a pointer to a buffer area that is going to get written into,
without requiring a size parameter, is a travesty of two mockeries of a sham.

Alan
Received on Jul 16 1996