Warnings / Compiler switch for secure programming

[Sean Kelly]

Matthias Walter wrote:
> 
> Maybe one could add compiler-flags, which activate warnings about possible insec
> ure programming in these cases.

Personally, this is something I hate about VC 2005.  I feel like it's 
suggesting that any use of functions without range checking is 
inherently wrong, and that programmers are idiots who need such 
reminders to write correct code.  I won't dispute that this does seem to 
be a common cause of bugs in some companies (such as Microsoft), but I 
do not believe it is the compiler's job to dictate programming style to 
the world.

This job is better suited to a style checker that can be loaded with a 
custom set of rules for each project, and I would expect a restricted 
function list to be just one facet of its validation mechanism.


Sean