I agree, generic int parsing would be a very nice addition to 
strutils/parseutils.

Somehow binary, hex and octal got generic int parsing before plain number 
stored in strings: 
[https://github.com/nim-lang/Nim/pull/11107/files](https://github.com/nim-lang/Nim/pull/11107/files).

And haha good catch on sscanf, didn't check that one after strlen.

Unfortunately I don't see how Nim newruntime can help detecting buffer overflow.

One thing that can be done is that when sysAssert and/or gcAssert flag are 
defined, all seq/string/ref get an additional field canary field, initialized 
with a pattern say 0x42424242, and the pattern is checked regularly to make 
sure no wild C proc or unsafe cast/addr usage overwrote it.

Reply via email to