Re: More thinking securely...

[David Rhodus <drhodus@xxxxxxxxx>]

On Dec 9, 2003, at 2:56 PM, Ryan Dooley wrote:

> >     But the work must definitely be reviewed.  For every 50 string 
> > functions
> >     you replace you have a good chance at introducing 1 new bug :-)
>
> Just out of idle curiosity...
>
> 	neptune# cd /usr/src.pp
> 	neptune# egrep -r "strcpy|strcat|sprintf|vsprintf" \
> 		> /root/unsafe.string_functions.txt
> 	neptune# wc -l /root/unsafe.string_functions.txt
> 	   14826 /root/unsafe.string_functions.txt
>
> :-)
>
> .. Ryan

Thats looks like your grep'ing the whole src tree ?

-DR