In message <Pine.NEB.4.21.0011281013340.240-100000@server.int.duh.org> Todd Vierling writes: : It's really not that hard to see that strcat(), sprintf() (without size : limiters in the format), etc. are just not safe to use in any well-written : program, setuid or not. Right. That's my API change... Warner