Re: PHP audit project

In addition to Zeev, Hey guys where is your problem if someone wants to infect php code with functions that increases stability of code? The last days i spent much work to get ext/exif working and many problems came from missuse of strxxx functions. Changing to functions like strlcpy makes the code much more stable and independent from exernal failures. And here again you cannot rely on the fact that you have read any standard about external stuff you are working on requirements/securisations of code not from yourself. Everything that comes from outside to php can be wrong and should be considered as such - this will also increase security against some server-attack mechanisms. And we are a large group doing an eXtreme developing - who knows exactly which function changes next day in which way? marcus At 14:31 11.03.2002, Zeev Suraski wrote:

Frank, Don't be discouraged by the feedback here. Your efforts are well appreciated! You can choose to use whichever functions you deem best, as long as you're the one doing the work :) Zeev At 02:23 PM 3/11/2002, Jedi/Sector One wrote:

On Mon, Mar 11, 2002 at 01:21:02PM +0100, Stefan Esser wrote:

strlcpy and strlcat are inventions of the OpenBSD project. Since they invented those they are trying to "infect" other projects.

PHP is already infected. Try to grep for strlcpy and strlcat in the _vanilla_ PHP source code. But that's ok. If you don't want us to work on PHP, let our project stop. --

 __  /*-      Frank DENIS (Jedi/Sector One) <j@42-Networks.Com>     -*\  __
 \ '/    <a href="http://www.PureFTPd.Org/"> Secure FTP Server </a>    \' /

\/ <a href="http://www.Jedi.Claranet.Fr/"> Misc. free software </a> \/ -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, visit: http://www.php.net/unsub.php

-- PHP Development Mailing List <http://www.php.net/> To unsubscribe, visit: http://www.php.net/unsub.php