20-04-2017, 05:09 AM
swestin Wrote:Isn't null termination the key point here?If so, then the heading should be changed to
Each of the listed functions depends on finding a null character to terminate the input string, making it vulnerable to overrun errors (or attacks). That's what is meant by "unbounded" in this rule. I believe the other functions all require an explicit length.
- Stephen
Quote:The unbounded string functions of library shall not be used
<t></t>