"Secure coding" audit checkers and Kerberos

Luke Howard lukeh at padl.com
Tue Oct 14 21:47:42 EDT 2008

> * Instead of strcpy or strcat, use memcpy.  Remember to ensure that
>  the string is terminated if you are not copying a terminator.

What about using strlcpy/strlcat (providing implementations for  
platforms that don't support them).

-- Luke

More information about the krbdev mailing list