From owner-freebsd-chat Mon Dec 16 12:53:32 1996 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.4/8.8.4) id MAA01820 for chat-outgoing; Mon, 16 Dec 1996 12:53:32 -0800 (PST) Received: from irz301.inf.tu-dresden.de (irz301.inf.tu-dresden.de [141.76.1.11]) by freefall.freebsd.org (8.8.4/8.8.4) with SMTP id MAA01815 for ; Mon, 16 Dec 1996 12:53:26 -0800 (PST) Received: from sax.sax.de (sax.sax.de [193.175.26.33]) by irz301.inf.tu-dresden.de (8.6.12/8.6.12-s1) with ESMTP id VAA13148; Mon, 16 Dec 1996 21:53:09 +0100 Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id VAA22663; Mon, 16 Dec 1996 21:53:09 +0100 Received: (from j@localhost) by uriah.heep.sax.de (8.8.4/8.6.9) id VAA08770; Mon, 16 Dec 1996 21:51:13 +0100 (MET) From: J Wunsch Message-Id: <199612162051.VAA08770@uriah.heep.sax.de> Subject: Re: crontab security hole To: downsj@teeny.org (Jason Downs) Date: Mon, 16 Dec 1996 21:51:12 +0100 (MET) Cc: marcs@znep.com, dv@kis.ru, freebsd-chat@freebsd.org In-Reply-To: <199612161457.GAA18590@threadway.teeny.org> from Jason Downs at "Dec 16, 96 06:57:12 am" X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E X-Mailer: ELM [version 2.4ME+ PL17 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-chat@freebsd.org X-Loop: FreeBSD.org Precedence: bulk As Jason Downs wrote: > Haven't any of you ever heard of a very simple and efficient non-stdio > routine called, of all things, strncpy()? Haven't any of you ever heard of the ugly misdesign of strn{cat,cpy}() to not delimit your string if it's reaching the end? I think this is violating the principle of least surprise... since they still have the `str' in the name, not `mem'. :) -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)