Re:Why aren't there C conferences? (2018)
by up2isomorphism on Sunday August 28, 2022 @11:14AM
(#32629021)
It just means not that many people give a damn about buffer overflows anyway. And put that situation to language’s fault just doesn’t make sense.
You are saying C string is slow, I am telling you short local strings are not slow, please tell me why it is slow in that case?
It's so easy, yet buffer overflows remain the #1 problem in shipped C code.
> For all small strings that just locally it serves its purpose nicely.
Not really. Whenever I review other peoples' C code, I look at their use of strlen/strncpy/strxxx functions. They're a rich source of bugs, and I'll usually find one in it (usually an off-by-one error). They don't have to be large strings, either, to be slow.