Subject: Re: vixie-crontab vunerable?
To: Bill Sommerfeld <sommerfeld@orchard.medford.ma.us>
From: Chris G Demetriou <Chris_G_Demetriou@auchentoshan.pdl.cs.cmu.edu>
List: current-users
Date: 12/16/1996 14:26:45
> Hmm.  Anyone for producing a "libcsafe" which doesn't include:
> 
> 	strcat
> 	strcpy
> 	sprintf
> 	gets
> 
> and other "unsafe", but traditional, interfaces, and then linking all
> setuid system programs against it instead of libc?

While i dunno about this, i do think that at the very least adding
reference-warning macros for those functions might be appropriate.



chris