Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 24 Sep 1995 08:33:37 +0100 (MET)
From:      J Wunsch <j@uriah.heep.sax.de>
To:        freebsd-current@freefall.freebsd.org
Subject:   Re: runtime warnings, opinion warning
Message-ID:  <199509240733.IAA29691@uriah.heep.sax.de>
In-Reply-To: <9509232236.AA07462@borg.ess.harris.com> from "James Leppek" at Sep 23, 95 06:36:54 pm

next in thread | previous in thread | raw e-mail | index | archive | help
As James Leppek wrote:
> 
> ... Since when did fbsd become a 
> religion where you conform or are damned for all time?
> This position is clearly in the "advocacy" or personal pet peeve catagory 
> that I always find amusing.

It's been there since 386BSD 0.0, i think. :)

> I can change things in a few minutes, but if I had a hundred users
> I would not be happy because they would be coming to me saying its broken.
> (to most users unsafe == broken)

This is ok.  If you see the warning next time, put your hand on the
keyboard for a minute, then hit enter. >:-)

> How about sprintf or strcpy, or any function that can blow a buffer?

gets() is typically used _directly on user input_.  That's the
problem.  The sprintf() saga is that the standard even forgot to
standardize a safer function. :-(

> The gets man page says don't use it, good place to mention it :-)

Nobody reads man pages.  In particular, if you port some existing
program, you wouldn't even notice that it's using gets() (unless
you're building a test environment and feed random garbage into the
standard input of any program).

If somebody sees it and cannot fix it himself, he should complain at
the vendor of the program.

If *you* are that unsatisfied with it, drop the warning from the
source, create your own libc.so, and replace the original one...

Sorry, i don't think you are going to find somebody here who'll share
your opinion.

-- 
cheers, J"org

joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/
Never trust an operating system you don't have sources for. ;-)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199509240733.IAA29691>