Skip to content

Latest commit

 

History

History
17 lines (9 loc) · 1.24 KB

c11-secure.md

File metadata and controls

17 lines (9 loc) · 1.24 KB
Raw

You Should Know: C11 Includes a More Secure strcpy()

You should know that the C11 update to the C programming language provides replacement “safe” versions of the historically problematic library routines strcpy() and strcat(). Using new C11 library functions like strcpy_s() is one way to make your code more secure against buffer overflow attacks.

From Michael Barr blog:

You should know that the new C11 update to the C programming language provides for a replacement “safe” version of the strcpy``, which is named strcpy_s()`. The parameter lists and return types differ:

char *strcpy(char *strDestination, const char *strSource);

versus:

errno_t strcpy_s(char *strDestination, size_t numberOfElements, const char *strSource);

The new numberOfElements parameter is used by strcpy_s() to check that the strSource is not bigger than the buffer. And, when there is a problem, an error code is returned.

More information on MSDN.