Hi all,
Recently there was a large commit to the FSO codebase that has been titled 'safe_strings'.
This commit implements some of
ISO/IEC 9899:1999 TC2, ISO/IEC TR 24731, particularly strcpy_s and strcat_s (others will come as they get added).
We're already starting to receive reports of various assertions being caused by safe_strings.
Let me be clear about this - safe_strings is now considered stable - if you get a warning from safe_strings, there IS a buffer overrun. safe_strings will not warn you whether or not you're going to corrupt your stack (for a stack allocated string buffer) and hence CTD, or whether you're going to overrun your global buffer and overwrite something important (if you've got DEP turned on, you may find some more interesting behaviour), however it WILL inform you of a buffer overrun and Assert to stop execution. safe_strings will now also give you the buffer size and the text that you're trying to stuff into it.
The #1 Antipodes build contained safe_strings and was posted 24/July, so you've all had the best part of a week to figure out whether or not safe_strings will affect you (because of the number of files changed - 168, maintaining the branch in that state for longer than a week would introduce larger chances of making mistakes during the merge into trunk)
On the code side, safe_strings will do a number of things:
- NO_SAFE_STRINGS can be defined, and the calls will be forwarded to the non *_s versions of the functions - The build will liberally spit hell fire at you along the lines of 'safe_strings excluded - this is bad.'
- If you're on GCC (i.e. Linux or MacOS) and you haven't defined NO_SAFE_STRINGS, the safe_strings code will be used
- Using VC6 is now equivalent to defining NO_SAFE_STRINGS
- VS2005+ Debug builds will use safe_strings, however the Release build will use the microsoft implementation, and users will see a CTD
- Assertions from safe_strings (in debug mode) now include more information. Including: file where the assert happens, line the assert happens, the destination buffer size, the text trying to be copied/concatenated into the destination buffer (NB: strcat_s reports the entire size of the buffer, not the buffer remaining)
Please report any instance of safe_strings asserting (you will need a debug build in order to do this) - we will not be able to fix your problem if you do not forward the relevant information to us.
portej05
