|
| From: | Paul Eggert |
| Subject: | Re: alloca |
| Date: | Sun, 26 Jul 2020 12:33:03 -0700 |
| User-agent: | Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 |
On 7/26/20 6:50 AM, Jeffrey Walton wrote:
It is about reducing attack surface and risk.
That's a good thing, but it's not the only thing. If all we cared about was reducing attack surface then we'd omit pointers, arrays, and recursion.
This reminds me of the effort long ago to replace all uses of strcpy with strlcpy or strcpy_s or whatever. What a waste of time that was.
| [Prev in Thread] | Current Thread | [Next in Thread] |