Re: fopen_s


"Eugene Gershnik" <gershnik@xxxxxxxxxxx> wrote in message
news:O$6HiHnmGHA.464@xxxxxxxxxxxxxxxxxxxxxxx

How returning errno helps with error reporting and what this has to do
with security as such is beyond my imagination. Presumably somebody at
Microsoft has trouble understanding and using an API that doesn't
uniformly return error codes in COM manner.

I think we're in danger of taking this too literally in too isolated a case.
The new ...._s APIs which fill buffers (like strcpy_s) do improve security -
IIRC the debug version asserts if you try and overfill the buffer. Maybe
fopen_s is not really needed for security but is just there to complete the
set? (Personally I find the new ones - and all the warnings you get if you
don't use them - a pain.)

Dave
--
David Webber
Author MOZART the music processor for Windows -
http://www.mozart.co.uk
For discussion/support see
http://www.mozart.co.uk/mzusers/mailinglist.htm



.

Relevant Pages

  • Re: The OpenSSL API
    ... | OpenSSL forces one to do all too often. ... application does not need to handle its own security contexts, ... such from the API? ... it is a "just right" level of complexity. ...
    (comp.os.linux.networking)
  • RE: Different credentials for remote registry/SCM access
    ... However, since these operations requires Admin right, you ... API with username/password of Admin to launch a Admin account's logon ... This API will return a security token which is a handle points to ... Microsoft Online Community Support ...
    (microsoft.public.platformsdk.security)
  • Re: SORTED
    ... Is it possible that this is in the "Security Center" API? ... This is demonstarated by the way a MS Windows security ... >> Application Integration Specialists ...
    (microsoft.public.win32.programmer.wmi)
  • Re: Desktop Creation
    ... Your statement only gives one small piece of the security picture. ... The reason for no desktop window access by services is that an unsecured ... session 1 and communicate with an IPC with the SYSTEM service. ... API evolution. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: APIs - Sorry to ask
    ... the API issue may resolve itself. ... For example there are ways in ORACLE ... The other end of security is reliability. ...
    (comp.databases)