Extra Defensive Measures

Check and limit the locale to valid values. (For more information, see David Wheelers Write It Secure: Format Strings and Locale Filtering listed in the Other Resources section below). Dont use the printf-family of functions if you can avoid it. For example, if youre using C++, use stream operators instead:

 #include <iostream> //... std::cout << user_input //... 


19 Deadly Sins of Software Security. Programming Flaws and How to Fix Them
Writing Secure Code
ISBN: 71626751
EAN: 2147483647
Year: 2003
Pages: 239

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net