I'm surprised curlx_strcopy doesn't return success. Sure you could check if dest...

AlexeyBrin · 2025-12-30T14:40:05 1767105605

I guess the idea is that if the code does not crash at this line:

    DEBUGASSERT(slen < dsize);

it means it succeeded. Although some compilers will remove the assertions in release builds.

I would have preferred an explicit error code though.

swinglock · 2025-12-30T16:02:53 1767110573

assert() is always only compiled if NDEBUG is not defined. I hope DEBUGASSERT is just that too because it really sounds like it, even more so than assert does.

But regardless of whether the assert is compiled or not, its presence strongly signals that "in a C program strcpy should only be used when we have full control of both" is true for this new function as well.

ahoka · 2025-12-31T00:05:49 1767139549

Yeah, thought the same. Expect some CVEs in the future.

spacechild1 · 2025-12-31T14:48:49 1767192529

What kind of CVE would you expect? The destination buffer will always contain a valid null-terminated string (as long as the buffer size is not zero).

jutter · 2025-12-30T15:05:32 1767107132

This is especially bizarre given that he explains above that "it is rare that copying a partial string is the right choice" and that the previous solution returned an error...

So now it silently fails and sets dest to an empty string without even partially copying anything!?