Brett Hutley wrote:

Kinda works like strdup() as far as I can see... (although I guess with a memory pool)...

   len = strlen(s) + 1;
   res = apr_palloc(a, len);
   memcpy(res, s, len);

The apr_palloc() will either allocate enough memory for a (potentially very large) string, or it will segfault (to my knowledge) and fail safe. Thus the memcpy will only occur if a buffer is created sufficiently large enough to hold the string, thus no overflow that I can see.


Again - can someone else check...?

Regards,
Graham
--
-----------------------------------------
[EMAIL PROTECTED] "There's a moon
over Bourbon Street
tonight..."




Reply via email to