|
|
|
|
|
by saagarjha
2109 days ago
|
|
I hear there are PDFs floating around on the internet, not that I would know anything about this of course ;) My copy has no examples that use gets, although it is mentioned and I would agree that any such mention without a disclaimer that the function is impossible to use safely is a defect. Error handling, however, is generally present (or left out for brevity and noted). The functions in the standard for dealing with bounds checks are a new addition to the standard and a pox on the language regardless so it's not the best example of something new that the book should cover. |
|
This is something that the book fails to teach, as it also has no mentions of modern static analysers practices, naturally given the book's age.
So at the end we get yet another C newbie writing future CVEs.