[#57574] [ruby-trunk - Feature #8976][Open] file-scope freeze_string directive — "akr (Akira Tanaka)" <akr@...>

70 messages 2013/10/02

[#57579] [ruby-trunk - Feature #8977][Open] String#frozen that takes advantage of the deduping — "sam.saffron (Sam Saffron)" <sam.saffron@...>

25 messages 2013/10/02

[#57679] [ruby-trunk - Feature #8987][Open] map/collect extension which handles arguments — "sowieso (So Wieso)" <sowieso@...>

16 messages 2013/10/05

[#57705] [ruby-trunk - Feature #8992][Open] Use String#freeze and compiler tricks to replace "str"f suffix — "headius (Charles Nutter)" <headius@...>

43 messages 2013/10/07

[#57727] [ruby-trunk - Feature #8998][Open] string keys for hash literals should use fstrings — "normalperson (Eric Wong)" <normalperson@...>

17 messages 2013/10/08

[#57771] [ruby-trunk - Bug #9008][Open] TestProcess#test_clock_getres_constants and TestProcess#test_clock_gettime_constants fails on ARM — "vo.x (Vit Ondruch)" <v.ondruch@...>

15 messages 2013/10/09

[#57888] [ruby-trunk - Feature #9025][Open] Clarify the error message when calling a method with the wrong number of arguments — Nerian (Gonzalo Rodríguez) <siotopo@...>

11 messages 2013/10/15

[#57993] [ruby-trunk - Feature #9047][Open] Alternate hash key syntax for symbols — "jamonholmgren (Jamon Holmgren)" <jamon@...>

13 messages 2013/10/23

[#58007] [ruby-trunk - Feature #9049][Open] Shorthands (a:b, *) for inclusive indexing — "mohawkjohn (John Woods)" <john.o.woods@...>

25 messages 2013/10/24

[#58033] [ruby-trunk - Bug #9053][Open] SSL Issue with Ruby 2.0.0 — "tisba (Sebastian Cohnen)" <ruby-lang@...>

16 messages 2013/10/25

[#58080] [ruby-trunk - Feature #9064][Open] Add support for packages, like in Java — "rosenfeld (Rodrigo Rosenfeld Rosas)" <rr.rosas@...>

23 messages 2013/10/30

[ruby-core:57933] Re: strlen and strnlen in Ruby

From: Charlie Somerville <charliesome@...>
Date: 2013-10-18 16:34:11 UTC
List: ruby-core #57933
On =46riday, 18 October 2013 at 12:03 PM, Edward Ocampo-Gooding wrote:
> Is there a reason why strcpy is used in some places but strncpy in othe=
rs=3F
> =20
> =20


I don't think there's any real convention in the CRuby codebase.
 =20
> (I=E2=80=99ve been dogmatically following the advice of my elders to fa=
vour strncpy whenever possible since it=E2=80=99s easy to run into securi=
ty issues or accidentally feeding a non-null-byte-terminated string in an=
d having the program crash or worse yet, use the result without checking.=
)
> =20
> =20

 =20
Keep in mind strncpy has its own flaws - if the source string is exactly =
the length of the destination buffer, it won't null terminate. =20

Personally I've never really been a fan of strncpy. strcpy is perfectly s=
afe if you know what you're doing. If you don't, you'll probably run into=
 problems with strncpy too.

In This Thread