| 翻訳と辞書 |
| OpenBSD security features ： ウィキペディア英語版 |
OpenBSD security features
The OpenBSD operating system is noted for its security focus and for the development of a number of security features.
== API and build changes ==
Bugs and security flaws are often caused by programmer error. A common source of error is the misuse of the ''strcpy'' and ''strcat'' string functions in the C programming language. There are two common alternatives, ''strncpy'' and ''strncat'',〔Man pages: (strncpy ) and (strncat ).〕 but they can be difficult to understand and easy to misuse, so OpenBSD developers Todd C. Miller and Theo de Raadt designed the ''strlcpy'' and ''strlcat'' functions.〔Man pages: (strlcpy ) and (strlcat ).〕 These functions are logical and easier to use, making it harder for programmers to accidentally leave buffers unterminated or allow them to be overflowed.〔Miller, Todd C. and Theo de Raadt. (strlcpy and strlcat - consistent, safe, string copy and concatenation ). Proceedings of the 1999 USENIX Annual Technical Conference, June 6–11, 1999, pp. 175–178.〕 They have been adopted by the NetBSD and FreeBSD projects but have not been accepted by the GNU C library, the former maintainer of which, Ulrich Drepper, vehemently opposed their incorporation on the grounds that programmers using them will cease to worry about the root issues inspiring their use, which may still be exploitable in a different way.〔Drepper, Ulrich. Mail to libc-alpha: ''(Re: PATCH: safe string copy and concetation(sic) ),'' August 8, 2000. Visited December 9, 2005.〕
On OpenBSD, the linker has been changed to issue a warning when unsafe string manipulation functions, such as ''strcpy'', ''strcat'', or ''sprintf'', are found. All occurrences of these functions in the OpenBSD source tree have been replaced. In addition, a static bounds checker is included in OpenBSD in an attempt to find other common programming mistakes at compile time.〔Madhavapeddy, Anil. Mail to openbsd-cvs: ''(CVS: cvs.openbsd.org: src ),'' June 6, 2003. Accessed March 31, 2013.〕 Other security-related APIs developed by the OpenBSD project are ''issetugid'' and ''arc4random''.〔Man pages: (issetugid ) and (arc4random ).〕
抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』
■ウィキペディアで「OpenBSD security features」の詳細全文を読む
スポンサード リンク
| 翻訳と辞書 : 翻訳のためのインターネットリソース |
Copyright(C) kotoba.ne.jp 1997-2016. All Rights Reserved.
|
|