3 ms·
Could someone explain why glibc doesn't include Annex K? I recently integrated clang-tidy at work, and we use snprintf() fairly regularly. clang-tidy by defaul
by tristan957 4y ago
Could someone explain why glibc doesn't include Annex K?
I recently integrated clang-tidy at work, and we use snprintf() fairly regularly. clang-tidy by default tells you to use snprintf_s() which just doesn't exist in glibc. Does it exist in other libcs?
I don't understand the history behind Annex K. Note that I write C every day, so I do know what it is trying to accomplish.
- rurban 4y agoThe glibc maintainers think that the mandatory Annex K bounds-checking is rubbish compared to their optional __FORTIFY_SOURCE. Note that safeclib does the very same optional compile-time checking, just again at run-time also. They also think that extensions by getenv() are more secure than extensions by callbacks. The real problem is that Annex K came from Microsoft, and people hated that.