• Stenberg: No strcpy either

    From LWN.net@86:200/23 to All on Wed Dec 31 06:40:07 2025

    Daniel Stenberg has written a blog
    post about the decision to ban the use strcpy()
    in curl:

    The main challenge with strcpy is that when using it we do not
    specify the length of the target buffer nor of the source string. [...]

    To make sure that the size checks cannot be separated from the copy
    itself we introduced a string copy replacement function the other day
    that takes the target buffer, target size,
    source buffer and source string length as arguments
    and only if the copy can be made and the null terminator also fits
    there, the operation is done.

    https://lwn.net/Articles/1052355/
    --- SBBSecho 3.34-Linux
    * Origin: Palantir * palantirbbs.ddns.net * Pensacola, FL * (86:200/23)