*BSD News Article 33183


Return to BSD News archive

Xref: sserve comp.os.386bsd.questions:11755 comp.os.386bsd.development:2327 comp.os.386bsd.misc:2788
Path: sserve!newshost.anu.edu.au!harbinger.cc.monash.edu.au!bunyip.cc.uq.oz.au!munnari.oz.au!spool.mu.edu!agate!asami
From: asami@cs.berkeley.edu (Satoshi Asami)
Newsgroups: comp.os.386bsd.questions,comp.os.386bsd.development,comp.os.386bsd.misc
Subject: Re: Why does FreeBSD 1.1.5 say gets() is unsafe?
Date: 25 Jul 94 19:59:04
Organization: CS Div. - EECS, University of California, Berkeley, CA 94720
Lines: 12
Message-ID: <ASAMI.94Jul25195904@cory.cs.berkeley.edu>
References: <30lrf3$2ii@acmez.gatech.edu> <ASAMI.94Jul21184711@forgery.cs.berkeley.edu>
	<31181v$ibk@agate.berkeley.edu>
	<ASAMI.94Jul25151654@forgery.cs.berkeley.edu>
	<311m2e$o33@agate.berkeley.edu>
NNTP-Posting-Host: cory-138.eecs.berkeley.edu
In-reply-to: edward@homer.CS.Berkeley.EDU's message of 26 Jul 1994 00:40:46 GMT

In article <311m2e$o33@agate.berkeley.edu>
        edward@homer.CS.Berkeley.EDU (Edward Wang) writes:

 * >Hmm, so how can you write a program that uses gets() and is safe?
 * 
 * As long as it's not setuid or run from a daemon, it's perfectly safe,
 * just coredumps from time to time.

Oh, of course if a core-dumping program is your definition of "safe",
it's safe.  I guess we reached an agreement here.

Satoshi