From ac9c1f0d560540fda821b2775a475c71b47cb3a0 Mon Sep 17 00:00:00 2001 From: Jay Berkenbilt Date: Sat, 5 Oct 2013 19:42:39 -0400 Subject: Security: replace operator[] with at For std::string and std::vector, replace operator[] with at. This was done using an automated process. See README.hardening for details. --- ChangeLog | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'ChangeLog') diff --git a/ChangeLog b/ChangeLog index 6ef8d42f..951d9d03 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,10 @@ 2013-10-05 Jay Berkenbilt + * Replace operator[] in std::string and std::vector with "at" in + order to get bounds checking. This reduces the chances that + incorrect code will result in data exposure or buffer overruns. + See README.hardening for additional notes. + * Use cryptographically secure random number generation when available. See additional notes in README. -- cgit v1.2.3-54-g00ecf