[saagarjha]

It’s getting memccpy, which is an extremely important function for the creation of a performant, safe string copying method.

[pjmlp]

It is impossible to be safe if size is a function argument that cannot be validated without hardware support.

[saagarjha]

My definition of safety likely differs from yours.

[pjmlp]

My definition of safety means having a size greater than the actual string doesn't turn an innocent looking call into a CVE database entry.

I bet the security industry agrees with my definition.

[bzb6]

Isn’t a function like that trivial to implement?