Re: PHP audit project

On Mon, Mar 11, 2002 at 01:43:40PM +0100, Stefan Esser wrote: > Sorry, my fault. I have overseen that. I just wanted to clearify what > strlcat and strlcpy are. strlcpy and strlcat are quick and dirty band aids against buffer overflows. They suck because if a string is truncated, other bad things can happen. These functions don't replace proper error handling. But once again, we just started the project, and this is a first step. Real fixes (without strl*) will come later. > I dislike OpenBSD because of several reasons but this list > is not the right place to discuss anything like this. Every operating system has strenghts and weakness. <insert your favorite OS here> is the best one because you know it very well, you feel confortable with it, and it fits your needs. OS wars are plenty stupid, especially in the opensource world. -- __ /*- Frank DENIS (Jedi/Sector One) <j@42-Networks.Com> -*\ __ \ '/ <a href="http://www.PureFTPd.Org/"> Secure FTP Server </a> \' / \/ <a href="http://www.Jedi.Claranet.Fr/"> Misc. free software </a> \/