Paolo Bonzini wrote: > >> The point is that u8_mbtouc will look only one byte past the end of > >> a (valid or invalid) character > > > > This is not guaranteed. If you call u8_mbtouc(&uc, needle, 4) you are > > asserting that needle[0..3] are valid memory addresses. > > In practice that's not what happens. The code does guarantee what I wrote.
The code may be changed in the future. If a guarantee is not documented AND checked by the test suite, you cannot rely on it. Bruno
