Page 1 of 1

Microsoft Bans "memcpy()" and more...

Posted: Fri May 15, 2009 9:14 am
by Falco Girgis
:lol:

As I was sipping my morning cup of coffee and sifting through today's issue of "CodeProject," I stumbled upon a pretty interesting article:
Unsafe at any speed: Memcpy() banished in Redmond wrote:Microsoft plans to formally banish the popular programming function that's been responsible for an untold number of security vulnerabilities over the years, not just in Windows but in countless other applications based on the C language. Effective later this year, Microsoft will add memcpy(), CopyMemory(), and RtlCopyMemory() to its list of function calls banned under its secure development lifecycle. [...]
Full article: http://www.theregister.co.uk/2009/05/15 ... es_memcpy/

I totally think that it's a good idea, but gcc can't exactly get RID of memcpy(). Think of all of the embedded processors and old C applications that rely on that and other, similar functions.

Re: Microsoft Bans "memcpy()" and more...

Posted: Fri May 15, 2009 11:01 am
by MarauderIIC
I think "secure development lifecycle" implies internal development practices.