D
DR
why are those functions marked as deprecated in Vc++2005? what should be
used instead?
used instead?
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
W
William DePalo [MVP VC++]
DR said:why are those functions marked as deprecated in Vc++2005?
Because malicious applications try to exploit vulnerabilities that arise
when those functions overflow the buffers allocated to hold the strings.
what should be used instead?
There are safer variants of the old C runtime functions described here:
http://msdn.microsoft.com/library/d...e/resources/strings/usingstrsafefunctions.asp
Regards,
Will
W
Willy Denoyette [MVP]
DR said:why are those functions marked as deprecated in Vc++2005? what should be
used instead?
Read all about the security enhanced versions of CRT functions:
http://msdn2.microsoft.com/library/wd3wzwts(en-us,vs.80).aspx
the motivations and how to deal with it:
http://msdn.microsoft.com/msdnmag/issues/05/05/SafeCandC/default.aspx
Willy.
E
Egbert Nierop \(MVP for IIS\)
DR said:why are those functions marked as deprecated in Vc++2005? what should be
used instead?
Funny, BSTR contains most of the support to avoid buffer overflows. Instead,
the C++ / C default is a zero terminated string which is infamous of being
interceptive for those overflows!...