Re: Re: Goals for Etch?

On Fri, Jun 17, 2005 at 01:50:00AM +0200, Ulf Harnhammar wrote:
> On Fri, Jun 17, 2005 at 01:20:14AM +0200, Ulf Harnhammar wrote:
> > * strncat(buf2, buf, sizeof(buf2))

* char buf[MAXVAL];
  .
  .
  strncat(buf, buf2, MAXVAL);

* gets(buf3);

are two other problems that don't give many false positives, so they're
relevant for the type of lighter audit that I think that document should
aim towards.

// Ulf