Changing Contents of a String with PtrToStringChar s

[cppdev]

What should happen if String contents are changed like below?
The contents do change and nothing crashed or anything.

String* str = S"hello";
Char __pin* ps = const_cast<Char *>(PtrToStringC hars(str));
while(ps && *ps != 0)
(*ps++)='0';
Console::WriteL ine(str);

[Mattias Sjögren]

What should happen if String contents are changed like below?
The contents do change and nothing crashed or anything.

You could end up chaniging strings you don't expect. Just try

String* str = S"hello";
String* str2 = str;
Char __pin* ps = const_cast<Char *>(PtrToStringC hars(str));
while(ps && *ps != 0)
(*ps++)='0';
Console::WriteL ine(str);
Console::WriteL ine(str2);

The CLR's string interning feature makes this even worse - you could
change strings in parts of the program you don't control.

Mattias

--
Mattias Sjögren [MVP] mattias @ mvps.org
http://www.msjogren.net/dotnet/
Please reply only to the newsgroup.

[cppdev]

Thanx Mattias!

I didn't think of interning :)

But let's take this to another plane:

String* password = Console::ReadLi ne();
if(String::IsIn terned(password ) == NULL)
{
Char __pin* ps = const_cast<Char *>(PtrToStringC hars(password)) ;
while(ps && *ps != 0)
(*ps++)='0';
}
Console::WriteL ine(password);

Basically i want to clear the password.

To anyone, So if String was not Interned it seems to be OK
to change it's contents although it's "immutable" ?
Mattias Sjögren <ma************ ********@mvps.o rg> wrote in message news:<#D******* *******@TK2MSFT NGP12.phx.gbl>. ..

What should happen if String contents are changed like below?
The contents do change and nothing crashed or anything.

You could end up chaniging strings you don't expect. Just try

String* str = S"hello";
String* str2 = str;
Char __pin* ps = const_cast<Char *>(PtrToStringC hars(str));
while(ps && *ps != 0)
(*ps++)='0';
Console::WriteL ine(str);
Console::WriteL ine(str2);

The CLR's string interning feature makes this even worse - you could
change strings in parts of the program you don't control.

Mattias

[Mattias Sjögren]

But let's take this to another plane:

String* password = Console::ReadLi ne();
if(String::IsI nterned(passwor d) == NULL)
{
Char __pin* ps = const_cast<Char *>(PtrToStringC hars(password)) ;
while(ps && *ps != 0)
(*ps++)='0';
}
Console::Write Line(password);

Basically i want to clear the password.
Can't you retrieve the password into a Byte[] or Char[] instead? That
would let you clear the content easily.

To anyone, So if String was not Interned it seems to be OK
to change it's contents although it's "immutable" ?

I would never say it's OK to do so.

Mattias

--
Mattias Sjögren [MVP] mattias @ mvps.org
http://www.msjogren.net/dotnet/
Please reply only to the newsgroup.

[cppdev]

Yes I can. But TextControl can't. :)
Even if i use GetWindowText myself, i derive the key
using PasswordDeriveB ytes which takes only string!
QAnd there are other cases also.

Mattias Sjögren <ma************ ********@mvps.o rg> wrote in message news:<#Z******* *******@TK2MSFT NGP09.phx.gbl>. ..

But let's take this to another plane:

String* password = Console::ReadLi ne();
if(String::IsI nterned(passwor d) == NULL)
{
Char __pin* ps = const_cast<Char *>(PtrToStringC hars(password)) ;
while(ps && *ps != 0)
(*ps++)='0';
}
Console::Write Line(password);

Basically i want to clear the password.

Can't you retrieve the password into a Byte[] or Char[] instead? That
would let you clear the content easily.

To anyone, So if String was not Interned it seems to be OK
to change it's contents although it's "immutable" ?

I would never say it's OK to do so.

Mattias

[Carl Daniel [VC++ MVP]]

A (more?) serious problem is that there's probably no guarantee that there
aren't other, unreachable copies of the password text in the GC heap.
Unless you can clear all of them, you're probably only gaining a false sense
of security.

-cd

cppdev wrote:

Yes I can. But TextControl can't. :)
Even if i use GetWindowText myself, i derive the key
using PasswordDeriveB ytes which takes only string!
QAnd there are other cases also.

Mattias Sjögren <ma************ ********@mvps.o rg> wrote in message
news:<#Z******* *******@TK2MSFT NGP09.phx.gbl>. ..

But let's take this to another plane:

String* password = Console::ReadLi ne();
if(String::IsIn terned(password ) == NULL)
{
Char __pin* ps = const_cast<Char *>(PtrToStringC hars(password)) ;
while(ps && *ps != 0)
(*ps++)='0';
}
Console::WriteL ine(password);

Basically i want to clear the password.

Can't you retrieve the password into a Byte[] or Char[] instead? That
would let you clear the content easily.

To anyone, So if String was not Interned it seems to be OK
to change it's contents although it's "immutable" ?

I would never say it's OK to do so.

Mattias

[Tian Min Huang]

Hi,

I am reviewing this post. Please feel free to let me know if you have any
problems or concerns.

Have a nice day!

Regards,

HuangTM
Microsoft Online Partner Support
MCSE/MCSD

Get Secure! ¨C www.microsoft.com/security
This posting is provided ¡°as is¡± with no warranties and confers no rights.

[cppdev]

Hi!

I think it would be nice if String class provided a Clear method.
My concern is with the .net strings that they can remain
indefinitely in memory.

timhuang (Tian Min Huang) wrote in message news:<ks******* *******@cpmsftn gxa06.phx.gbl>. ..

Hi,

I am reviewing this post. Please feel free to let me know if you have any
problems or concerns.

Have a nice day!

Regards,

HuangTM
Microsoft Online Partner Support
MCSE/MCSD

Get Secure! ¨C www.microsoft.com/security
This posting is provided ¡°as is¡± with no warranties and confers no rights.

[Tian Min Huang]

Hi,

Thanks for your response. As you know, .NET Framework introduces Garbage
Collection to manage the memory, that is, the String memory is also
controled by GC. Although we are able to force GC with explicit System.gc
calls, overuse can severely affect performance. I strongly recommend you
the following articles on GC:

Garbage Collection: Automatic Memory Management in the Microsoft .NET
Framework
http://msdn.microsoft.com/msdnmag/is...I/default.aspx

Garbage Collection¡ªPar t 2: Automatic Memory Management in the Microsoft
.NET Framework
http://msdn.microsoft.com/msdnmag/is...2/default.aspx

I look forward to your feedback.

Have a nice day!

Regards,

HuangTM
Microsoft Online Partner Support
MCSE/MCSD

Get Secure! ¨C www.microsoft.com/security
This posting is provided ¡°as is¡± with no warranties and confers no rights.

[Tian Min Huang]

Hi,

Thanks a lot for your feedback. Now that I understand your concerns, I will
report it to our Development Team and I believe they will take it into
consideration for the future version of .NET Framewok.

Have a nice day!

Regards,

HuangTM
Microsoft Online Partner Support
MCSE/MCSD

Get Secure! ¨C www.microsoft.com/security
This posting is provided ¡°as is¡± with no warranties and confers no rights.