Why Does This Happen?

• C makes it hard to handle strings well.

  • C++ makes it much easier, but too many people write in C, albeit with a C++ compiler.

• Ordinary prudent code isn’t safe against attack; MAXPATHLEN is an OS limitation, and is not binding on hackers.

• Time pressure.

Previous slide

Next slide

Back to first slide

View graphic version