Home/ Questions/Q 7758291
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-01T13:19:16+00:00

I have an old project that is mixed C and C++. It makes extensive

  • 0

I have an old project that is mixed C and C++. It makes extensive use of C strings and of strcpy,strcat,strncpy,strncat etc. I’ve uncovered a number of buffer overflows, and I’d like to use more secure functions, such as strcpy_s. MSVC includes those functions, but I need something that will work on various platforms – linux, osx, and windows at the least.

I do know of strlcpy, but as plenty of people have noted (example), it really isn’t an improvement.

So: Are there any free implementations of strcpy_s, strcat_s, etc, or of the entire TR24731-1?

I need something that’s either public domain or BSD, but if you know of implementations under other licenses, go ahead and list them – I’m sure someone else will benefit.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Try with the Safe C library. It’s under the MIT license and according to this list implements the functions you’re looking for:

    The Safe C Library provides bound checking memory and string functions per ISO/IEC TR24731.
    These functions are alternative functions to the existing standard C library that promote safer, more secure programming

    • 0