strcpy, strcat, ... deprecated?

[DR]

why are those functions marked as deprecated in Vc++2005? what should be
used instead?

 

[William DePalo [MVP VC++]]

why are those functions marked as deprecated in Vc++2005?

Because malicious applications try to exploit vulnerabilities that arise
when those functions overflow the buffers allocated to hold the strings.

what should be used instead?

There are safer variants of the old C runtime functions described here:

http://msdn.microsoft.com/library/d...e/resources/strings/usingstrsafefunctions.asp

Regards,
Will

 

[Willy Denoyette [MVP]]

why are those functions marked as deprecated in Vc++2005? what should be
used instead?

Read all about the security enhanced versions of CRT functions:

http://msdn2.microsoft.com/library/wd3wzwts(en-us,vs.80).aspx

the motivations and how to deal with it:

http://msdn.microsoft.com/msdnmag/issues/05/05/SafeCandC/default.aspx

Willy.

 

[Egbert Nierop \(MVP for IIS\)]

why are those functions marked as deprecated in Vc++2005? what should be
used instead?

Funny, BSTR contains most of the support to avoid buffer overflows. Instead,
the C++ / C default is a zero terminated string which is infamous of being
interceptive for those overflows!...