"Secure coding" audit checkers and Kerberos

John Hascall john at iastate.edu
Wed Oct 15 16:16:06 EDT 2008

> asprintf(&buf, "%s%s%s", s1, s2, s3);
> if (buf == NULL)
>    return ENOMEM;
> Love

  asprintf is a non-standard, and therefore
  sub-optimally portable, GNU extension --
  so you're still stuck writing something else
  (perhaps your own asprintf implementation,
  which is far more baggage than one needs
  to concat a few strings).


More information about the krbdev mailing list