Defensive programming: Difference between revisions

Revision as of 23:23, 26 January 2003

Revision as of 01:57, 22 November 2003

Line 9:

<i>Please expand this article. These random notes should be changed to a more coherent article.</i>

* One of the the most common problems is unchecked use of constant-size structures and functions for dynamic-size data (the [[buffer overflow]] problem). This is especially common for [[string]] data in [[C programming language|C]].

You should never use functions like <tt>gets</tt> and <tt>scanf</tt>.

* Never make your code more complex than necessary. Complexity breeds bugs, including security problems.