Paul Eggert <[EMAIL PROTECTED]> wrote:
> I recently redisovered the fact that actime_r and ctime_r, like
> asctime and ctime, are unsafe functions in the same sense that gets is
> unsafe: they can overrun their output buffers and there's no simple
> way for the user to detect in advance whether this will happen.

Even in glibc, until a few months ago, those functions could overrun the
classic (and recommended) 26-byte buffer.  I reported the bugs here:

  http://sourceware.org/bugzilla/show_bug.cgi?id=1460
  http://sourceware.org/bugzilla/show_bug.cgi?id=1459

> GNU apps shouldn't use these functions, and I propose that we remove
> these function emulations from gnulib, as follows.  Any objections?

Good idea.
Thanks for doing that.


_______________________________________________
bug-gnulib mailing list
bug-gnulib@gnu.org
http://lists.gnu.org/mailman/listinfo/bug-gnulib

Reply via email to