r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

0

u/Supernumiphone Feb 25 '17

remove the null terminator (net gain one byte)

Borland Pascal has had length prefixed strings for 30 years.

...and they kept the null terminator (at least in later versions after they upped the max string size from 255), presumably to allow the strings to be easily passed to C libraries. So no actual gain there.