Authoring Systems White Papers
Make Your Software Behave: Preventing Buffer Overflows
Overview
Most buffer overflow problems in C can be traced directly back to the standard C library. The worst culprits are the problematic string operations that do no argument checking (strcpy, strcat, sprintf, gets). Generally speaking, hard and fast rules like "Avoid strcpy()" and "Never use gets()" are close to the mark.
Programs written today still make use of these calls, because developers are never taught to avoid them. Some people pick up a hint here and there, but even good developers can screw up. They may use homegrown checks on the arguments to dangerous functions, or incorrectly reason that the use of a potentially dangerous function is "safe" in some particular case.
| Publisher | IBM | File Format | HTML |
|---|---|---|---|
| Date Published | March 2000 | Downloads | 13 |
| Format | White Papers | ||
| Topics | |||



