17 May 2009
Unsafe at any speed: Memcpy() banished in Redmond

Well, in my not so humble opinion as a long time C coder, this is pretty brain dead. Memcpy() already has a length parameter -

void *memcpy(void *dest, const void *src, size_t n)

what good will adding another do? If you're brain damaged enough to misuse it as it is, you're probably going to be brain damaged enough to misuse it no matter how many additional parameters are added. As with any technology, it's not the tools that are the problem here - it's the way the tools are used.

A more colorful take is provided at Perl.org.

Memcpy() and brethren, your days are numbered. At least in development shops that aspire to secure coding.

(link) [The Register]

08:19 /Technology | 0 comments | permanent link