[Info-vax] VAX Macro to C conversion

[Stephen Hoffman]

On 2019-07-25 00:36:27 +0000, Craig A. Berry said:

> On 7/24/19 8:28 AM, John Reagan wrote:
>> 
>> DECC$ATOI                       = PROCEDURE,-
>> DECC$ATOL                       = PROCEDURE,-
>> DECC$MEMCHR                     = PROCEDURE,-
>> DECC$MEMCMP                     = PROCEDURE,-
>> DECC$STRCAT                     = PROCEDURE,-
>> DECC$STRCHR                     = PROCEDURE,-
>> DECC$STRCMP                     = PROCEDURE,-
>> DECC$STRCPY                     = PROCEDURE,-
> 
> Yum, ASCIZ string functions with no bounds checking in the kernel :-).
> Probably not the most dangerous thing out there, but possibly worth a 
> rethink at some point.

Not only in the OpenVMS kernel code, but also third-party inner-mode code.

Might well want to replace and retire and deprecate all of those calls 
with modern and secure calls, rather than perpetuating the foundations 
of what can well be vulnerabilities and instabilities.

Other platforms are increasingly restricting or deprecating or 
isolating add-on kernel code, too.  But OpenVMS isn't yet near having 
the necessary foundations for that approach.



-- 
Pure Personal Opinion | HoffmanLabs LLC