Problem - Kevin Tafuro

Unfortunately, strlcpy( ) and strlcat( ) are not available on all platforms; at
present, they seem to be available only on Darwin, FreeBSD, NetBSD, and Open-
BSD. Fortunately, they are easy to implement yourself—but you don’t have to,
because we provide implementations here:
#include
#include
size_t strlcpy(char *dst, const char *src, size_t size) {
char *dstptr = dst;
size_t tocopy = size;
const char *srcptr = src;
if (tocopy && --tocopy) {
do {
if (!(*dstptr++ = *srcptr++)) break;
} while (--tocopy);
}
if (!tocopy) {
if (size) *dstptr = 0;
while (*srcptr++);
}
return (srcptr - src - 1);
}
size_t strlcat(char *dst, const char *src, size_t size) {
char *dstptr = dst;
size_t dstlen, tocopy = size;
const char *srcptr = src;
while (tocopy-- && *dstptr) dstptr++;
dstlen = dstptr - dst;
if (!(tocopy = size - dstlen)) return (dstlen + strlen(src));
while (*srcptr) {
if (tocopy != 1) {
*dstptr++ = *srcptr;
tocopy--;
}
srcptr++;
}
*dstptr = 0;
return (dstlen + (srcptr - src));
}
As part of its security push, Microsoft has developed a new set of string-handling functions
for C and C++ that are defined in the header file strsafe.h. The new functions handle
both ANSI and Unicode character sets, and each function is available in byte count
and character count versions. For more information regarding using strsafe.h functions
in your Windows programs, visit the Microsoft Developer’s Network (MSDN) reference
for strsafe.h.
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
Preventing Buffer Overflows | 81