[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: removing asctime_r, ctime_r from the time_r module
From: |
Jim Meyering |
Subject: |
Re: removing asctime_r, ctime_r from the time_r module |
Date: |
Sat, 11 Mar 2006 10:50:37 +0100 |
Paul Eggert <address@hidden> wrote:
> I recently redisovered the fact that actime_r and ctime_r, like
> asctime and ctime, are unsafe functions in the same sense that gets is
> unsafe: they can overrun their output buffers and there's no simple
> way for the user to detect in advance whether this will happen.
Even in glibc, until a few months ago, those functions could overrun the
classic (and recommended) 26-byte buffer. I reported the bugs here:
http://sourceware.org/bugzilla/show_bug.cgi?id=1460
http://sourceware.org/bugzilla/show_bug.cgi?id=1459
> GNU apps shouldn't use these functions, and I propose that we remove
> these function emulations from gnulib, as follows. Any objections?
Good idea.
Thanks for doing that.