[18496] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Clearing sensitive in-memory data in perl

daemon@ATHENA.MIT.EDU (Roy M. Silvernail)
Sat Sep 17 14:57:54 2005

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Sat, 17 Sep 2005 14:18:54 -0400
From: "Roy M. Silvernail" <roy@rant-central.com>
To: Adam Shostack <adam@homeport.org>
Cc: cryptography@metzdowd.com
In-Reply-To: <20050917161724.GA21690@homeport.org>

Quoting Adam Shostack <adam@homeport.org>:

> I recall that for a while if you used gets, the linker would
> complain.  I can't recall what platform this was on.  BSDi, maybe?

There used to be a fairly standard set of #defines along this line that were
added to <stdio.h> or some other standard header file.  Something like

#define strcpy          DONT_USE_STRCPY
#define strncpy         DONT_USE_STRNCPY
#define strcat          DONT_USE_STRCAT
#define strncat         DONT_USE_STRNCAT
#define gets            DONT_USE_GETS
#define sprintf         DONT_USE_SPRINTF

I don't think it was standard in any platform, though. More of an ad hoc
measure.
-- 
Roy M. Silvernail is roy@rant-central.com, and you're not
"It's just this little chromium switch, here." - TFT
SpamAssassin->procmail->/dev/null->bliss
http://www.rant-central.com

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post