On 14 Sep 2009, at 11:48, Sean McBride wrote:
On 9/13/09 12:01 PM, Jens Alfke said:
It would be best to convert all your sprintf calls to snprintf, which
is a safer equivalent that won't overflow the buffer.
Yes, sprintf is pure evil. snprintf is less evil.
Also, I recommend adding -fstack-protector -D_FORTIFY_SOURCE=2, they
can
help catch some of these problems. And valgrind would probably have
caught this problem immediately.
Sadly, valgrind hasn't yet been updated to run under Snow Leopard.
_______________________________________________
Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com
This email sent to arch...@mail-archive.com