4 ms·
If you have to handle malicious or potentially buggy input, you probably have to check length anyway to avoid DoS, so std::string isn't automatically safe.
by mortehu 9y ago
If you have to handle malicious or potentially buggy input, you probably have to check length anyway to avoid DoS, so std::string isn't automatically safe.
- pcwalton 9y agoDoS is way less severe than RCE caused by buffer overflows.