bug-gnulib
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: removing asctime_r, ctime_r from the time_r module


From: Jim Meyering
Subject: Re: removing asctime_r, ctime_r from the time_r module
Date: Sat, 11 Mar 2006 10:50:37 +0100

Paul Eggert <address@hidden> wrote:
> I recently redisovered the fact that actime_r and ctime_r, like
> asctime and ctime, are unsafe functions in the same sense that gets is
> unsafe: they can overrun their output buffers and there's no simple
> way for the user to detect in advance whether this will happen.

Even in glibc, until a few months ago, those functions could overrun the
classic (and recommended) 26-byte buffer.  I reported the bugs here:

  http://sourceware.org/bugzilla/show_bug.cgi?id=1460
  http://sourceware.org/bugzilla/show_bug.cgi?id=1459

> GNU apps shouldn't use these functions, and I propose that we remove
> these function emulations from gnulib, as follows.  Any objections?

Good idea.
Thanks for doing that.




reply via email to

[Prev in Thread] Current Thread [Next in Thread]