In addition to Zeev,

Hey guys where is your problem if someone wants to infect php code with
functions that increases stability of code? The last days i spent much work
to get ext/exif working and many problems came from missuse of strxxx
functions. Changing to functions like strlcpy makes the code much more
stable and independent from exernal failures.

And here again you cannot rely on the fact that you have read any standard
about external stuff you are working on requirements/securisations of code
not from yourself. Everything that comes from outside to php can be wrong
and should be considered as such - this will also increase security against
some server-attack mechanisms. And we are a large group doing an eXtreme
developing - who knows exactly which function changes next day in which way?

marcus

At 14:31 11.03.2002, Zeev Suraski wrote:
>Frank,
>
>Don't be discouraged by the feedback here.  Your efforts are well 
>appreciated!  You can choose to use whichever functions you deem best, as 
>long as you're the one doing the work :)
>
>Zeev
>
>At 02:23 PM 3/11/2002, Jedi/Sector One wrote:
>>On Mon, Mar 11, 2002 at 01:21:02PM +0100, Stefan Esser wrote:
>> > strlcpy and strlcat are inventions of the OpenBSD project. Since they
>> > invented
>> > those they are trying to "infect" other projects.
>>
>>   PHP is already infected.
>>
>>   Try to grep for strlcpy and strlcat in the _vanilla_ PHP source code.
>>
>>   But that's ok. If you don't want us to work on PHP, let our project stop.
>>
>>--
>>  __  /*-      Frank DENIS (Jedi/Sector One) <[EMAIL PROTECTED]>     -*\  __
>>  \ '/    <a href="http://www.PureFTPd.Org/";> Secure FTP Server </a>    \' /
>>   \/  <a href="http://www.Jedi.Claranet.Fr/";> Misc. free software </a>  \/
>>
>>--
>>PHP Development Mailing List <http://www.php.net/>
>>To unsubscribe, visit: http://www.php.net/unsub.php
>
>
>--
>PHP Development Mailing List <http://www.php.net/>
>To unsubscribe, visit: http://www.php.net/unsub.php


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to