On 5/9/25 11:37 AM, Christopher Schultz wrote:
So you can either have the C programmers review all their code (which I would encourage) and/or you could have your Java programmers ensure nothing potentially-nasty gets passed into the C code. Belt and suspenders.
I *am* "the C programmers," and I'm almost certain that there is nothing in the C layer that expects nulls in the incoming data stream (which uses a proprietary protocol that, as I recall, requires packets to declare their byte-counts) to terminate strings, or indeed, to hold any special significance whatsoever.
And most of the real work in that server is done in RPG, which, when it uses variable-length strings at all, prepends them with lengths.
-- JHHL --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
