• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re[4]: strcpy_s in Xcode?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re[4]: strcpy_s in Xcode?


  • Subject: Re[4]: strcpy_s in Xcode?
  • From: Marshall Clow <email@hidden>
  • Date: Wed, 3 Oct 2007 07:46:08 -0700

At 7:51 AM +0100 10/3/07, Peter Mulholland wrote:
Hello ygor,

Tuesday, October 2, 2007, 9:10:24 PM, you wrote:

 How do you think one becomes a Coding God ? (capitalize, please)
 You do the checks yourself.

Even the most well-checked projects have had bugs with buffer overflows.

Topical News: <http://www.securityfocus.com/bid/25831/discuss>

OpenSSL is prone to an off-by-one buffer-overflow vulnerability because the library fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

but the real irony is at the bottom of the announcement:

NOTE: This issue was introduced in the fix for the vulnerability described in BID 20249 (OpenSSL SSL_Get_Shared_Ciphers Buffer Overflow Vulnerability).

That's gotta hurt.
--
-- Marshall

Marshall Clow     Idio Software   <mailto:email@hidden>

It is by caffeine alone I set my mind in motion.
It is by the beans of Java that thoughts acquire speed,
the hands acquire shaking, the shaking becomes a warning.
It is by caffeine alone I set my mind in motion.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden


References: 
 >Re[4]: strcpy_s in Xcode? (From: Peter Mulholland <email@hidden>)

  • Prev by Date: Re[4]: strcpy_s in Xcode?
  • Next by Date: my first target
  • Previous by thread: Re[4]: strcpy_s in Xcode?
  • Next by thread: Re: Re[2]: strcpy_s in Xcode?
  • Index(es):
    • Date
    • Thread