Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yeah, and I wouldn't say it's definitely unsafe. You can memchr a '\0' out of it (or not) to determine if a null terminator got in there or not.


I mean, you could but a lot of people do not. Plus, strncpy is terribly inefficient if the source string is tiny, because it’ll fill the rest of the buffer with NULs.


One mans inefficiency is another mans resistance to timing attacks :P

(this is tongue-in-cheek, the function is still bad IMO because it almost never does what you need it to. If it guaranteed null termination it would be more useful)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: