Visual Studio 2005 Safe C and C++ (Safe CRT) Runtime Library

When Visual Studio 2005 was released in November 2005 there were many features announced and talked about extensively.  However, I found one piece that was overlooked was the major changes made to the C and C++ Runtime Library to improve Security in your C++ applications.  Specific functions that were found to be unsafe and thus increase the risk of buffer and Integer overflow attacks have been deprecated or replaced by new and safer functions.  Check out the article by Martyn Lovell  (Developer Lead on the Microsoft C++ Library Team) on the guiding principles to Safe Libraries.

Comments

  • Anonymous
    February 13, 2006
    We just finished out third episode of Plumbers at Work Episode 3 for your listening pleasures. ...
  • Anonymous
    February 14, 2006
    I have already highlighted some of the subtle security and migration issues with .NET Framework 2.0 such...