In fact buffer overflow will probably be reduced by unit testing because of unexpeted behaviour of some functions when called with long parameters.
Alex Schultz a écrit : >That would be more functional testing than unit testing, however both >are planned in the framework. security functional testing may be a good >idea to include some of. Perhaps some thing like attempted buffer >overflows over the protocol, or verifying that the password code isn't >making any silly mistakes at any time in the future. >That said, I'm not sure exactly what could be done for these sorts of >tests, as not every circumstance could be tested, so the difficulty is >planning what things are most important to test in order to catch >potential future or current flaws in security. > >Miguel Ghobangieno wrote: > > > >>Yay. There should be added some security unit tests >>aswell. >> >> >> > >_______________________________________________ >crossfire mailing list >[email protected] >http://mailman.metalforge.org/mailman/listinfo/crossfire > > > _______________________________________________ crossfire mailing list [email protected] http://mailman.metalforge.org/mailman/listinfo/crossfire
