> If you're going to validate user input, you first need to get it into kernel space, which requires allocating memory for it. i don't buy this - if you are go

> If you're going to validate user input, you first need to get it into kernel space, which requires allocating memory for it. i don't buy this - if you are going to allocate space, you must know the size of the space you are allocating. which you can validate, and certainly does not require going into kernel space to do.