c++ - What is Security Development Lifecycle Checks option in Visual Studio? -
i using visual studio 2013 preview, although i'm sure i've seen in earlier versions. when creating new project using wizard, select c++, win32 console application, , there option enable security development lifecycle checks on project. explain option code/project?
the /sdl
switch described here. turns warnings errors, not affect code. furthermore, applies /gs
check more aggresively.
don't expect it. microsoft sdl workaround 1980's style c programming. use 20th century c++, don't need it. e.g. operator+(std::string, std::string)
both safe , portable. microsoft's sdl solution here in contrast not portable, nor safe - idea behind /gs
find errors c string handling @ runtime , abort program, limiting consequences not making safe.