From: "David A. Wheeler" <dwheeler@dwheeler.com>
To: "libc-alpha" <libc-alpha@sourceware.org>
Subject: Re: Implement C11 annex K?
Date: Fri, 15 Aug 2014 22:25:00 -0000 [thread overview]
Message-ID: <E1XIPve-0007fP-7P@rmm6prod02.runbox.com> (raw)
In-Reply-To: <53EE83D0.1070703@cs.ucla.edu>
On Fri, 15 Aug 2014 15:04:00 -0700, Paul Eggert <eggert@cs.ucla.edu> wrote:
> That URL is part of circa-2002 discussion on this topic, a discussion
> which closely resembled this one, right down to the list of
> participants. Maybe we should repeat again in 2026?
I think there will be *no* need to wait until 2026 :-).
The article https://lwn.net/Articles/507319/
notes requests to add strlcpy/strlcat to glibc have occurred in at least
2000, 2004, 2007, 2011, and 2012. We can now add 2014. There are probably other
years, and I'm not even including annex K (which would be ANOTHER list).
Yet with the data I have it looks like there's an increasing frequency of requests!
If glibc doesn't add functions that *easily* counter buffer
overflows in fixed-length strings, I predict with high confidence that requests will
keep coming, because this continues to be widely perceived as an unmet need.
I'm sure many requests are rejected by the glibc developers and stay rejected...
but this is *NOT* one of them.
These functions are used in OpenSSL, LibreSSL, OpenSSH, OpenBSD,
and the Linux kernel at *least*, and probably many others.
Projects keep re-implementing them, typically less efficiently than a glibc
implementation would be. There are reasons for this.
--- David A. Wheeler
next prev parent reply other threads:[~2014-08-15 22:25 UTC|newest]
Thread overview: 79+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <1407616492.31098.ezmlm@sourceware.org>
2014-08-09 20:52 ` David A. Wheeler
2014-08-10 7:52 ` Andreas Jaeger
2014-08-10 15:03 ` Adhemerval Zanella
2014-08-11 15:32 ` Joseph S. Myers
2014-08-11 15:52 ` Paul Eggert
2014-08-11 16:06 ` Joseph S. Myers
2014-08-11 15:56 ` David A. Wheeler
2014-08-12 4:23 ` Rich Felker
[not found] ` <3565dfa0-060c-46b9-b08c-6edc4eaa1179@email.android.com>
2014-08-12 21:00 ` Rich Felker
[not found] ` <d4ae8119-f629-4235-8981-dd2ccc220fea@email.android.com>
2014-08-12 22:08 ` Rich Felker
2014-08-12 23:15 ` David A. Wheeler
2014-08-12 23:48 ` dalias
2014-08-13 19:23 ` David A. Wheeler
2014-08-13 19:44 ` Adhemerval Zanella
2014-08-13 19:45 ` Adhemerval Zanella
2014-08-13 20:49 ` Rich Felker
2014-08-13 20:41 ` dalias
2014-08-13 20:55 ` Joseph S. Myers
2014-08-13 21:25 ` Paul Eggert
2014-08-13 21:35 ` Rich Felker
2014-08-13 22:46 ` Tolga Dalman
2014-08-13 23:59 ` Russ Allbery
2014-08-14 0:55 ` Joseph S. Myers
2014-08-14 1:01 ` Russ Allbery
2014-08-14 2:25 ` Rich Felker
2014-08-14 5:25 ` Russ Allbery
2014-08-14 5:46 ` Rich Felker
2014-08-14 6:15 ` Russ Allbery
2014-08-14 9:55 ` Florian Weimer
2014-08-14 10:02 ` Andreas Schwab
2014-08-14 10:06 ` Florian Weimer
2014-08-14 10:13 ` Andreas Schwab
2014-08-14 16:26 ` Rich Felker
2014-08-14 16:53 ` Andreas Schwab
2014-08-14 17:04 ` Rich Felker
2014-08-18 7:31 ` Andreas Schwab
2014-08-18 19:20 ` Rich Felker
2014-08-14 15:20 ` Paul Eggert
2014-08-14 17:20 ` Russ Allbery
2014-08-14 17:46 ` Rich Felker
2014-08-15 7:51 ` Florian Weimer
2014-08-14 6:08 ` Paul Eggert
2014-08-15 14:25 ` David A. Wheeler
2014-08-15 15:36 ` Paul Eggert
2014-08-15 16:14 ` David A. Wheeler
2014-08-15 16:39 ` Rich Felker
2014-08-15 22:01 ` David A. Wheeler
2014-08-16 2:19 ` Rich Felker
2014-08-16 2:26 ` Russ Allbery
2014-08-16 2:49 ` Rich Felker
2014-08-16 3:03 ` Russ Allbery
2014-08-15 22:04 ` Paul Eggert
2014-08-15 22:25 ` David A. Wheeler [this message]
2014-08-15 22:43 ` Adhemerval Zanella
2014-08-16 4:41 ` David A. Wheeler
2014-08-16 5:01 ` Rich Felker
2014-08-17 18:03 ` David A. Wheeler
2014-08-17 19:05 ` dalias
2014-08-17 20:33 ` David A. Wheeler
2014-08-17 23:25 ` Rich Felker
2014-08-18 0:59 ` David A. Wheeler
2014-08-18 0:15 ` David A. Wheeler
2014-08-18 8:03 ` Paul Eggert
2014-08-18 19:22 ` Rich Felker
2014-08-21 22:45 ` David A. Wheeler
2014-08-22 0:37 ` Rich Felker
2014-08-22 1:39 ` William Park
2014-08-22 1:53 ` Jonathan Nieder
2014-08-22 4:36 ` William Park
2014-08-22 2:32 ` Paul Eggert
2014-08-22 2:51 ` Rich Felker
2014-09-08 23:21 ` David A. Wheeler
2014-09-09 3:34 ` Paul Eggert
2014-08-13 22:20 ` Time to add strlcpy/strlcat FINALLY David A. Wheeler
2014-08-14 1:09 ` Paul Eggert
2014-08-14 2:34 ` Rich Felker
2014-08-14 3:02 ` William Park
2014-08-14 13:01 ` Mike Frysinger
2014-08-15 10:37 ` Michael Kerrisk (man-pages)
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=E1XIPve-0007fP-7P@rmm6prod02.runbox.com \
--to=dwheeler@dwheeler.com \
--cc=libc-alpha@sourceware.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).