On November 4, 2001 07:52 pm, Jakob Østergaard wrote:
> On Sun, Nov 04, 2001 at 01:30:38PM -0500, Alexander Viro wrote:
> > Folks, could we please deep-six the "ASCII is tough" mentality? Idea of
> > native-endian data is so broken that it's not even funny. Exercise:
> > try to export such thing over the network. Another one: try to use
> > that in a shell script. One more: try to do it portably in Perl script.
>
> So make it network byte order.
>
> How many bugs have you heard of with bad use of sscanf() ?
Yes, and it's easy for those to be buffer overflow bugs. The extra security
risk is even more of a reason to avoid ASCII strings in internal interfaces
than the gross overhead. Do the ASCII conversions in user space, please.
No, ASCII isn't tough, it just sucks as an internal transport.
-- Daniel - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Wed Nov 07 2001 - 21:00:23 EST