Remotely Compromising Android and iOS via a bug in Broadcom's WI-FI Chipsets

C's lack of array size info strikes again:

    memcpy(current_wmm_ie, ie->data, ie->len);

where "ie" points to data obtained from the net.

C's lack of arrays strikes again. They are essentially syntactic sugar.

What do you mean by C not having arrays?

It's syntactic sugar in the sense that arr[i] is just shorthand for *(arr+i)

There's no abstraction or 'concept' of arrays there. You are literally just telling the compiler to take a certain pointer and move i steps ahead.

Isn't that the definition of an array? Chunk of contiguous memory plus a notion of how to subdivide it into equal parts?

Yes, exactly. A chunk of memory. A chunk has an end.

But "arrays" in C aren't a chunk of memory, just the info where it starts and how large elements are.

The problem is that a frightening number of people don't bother to write the half-dozen obvious wrappers around this, and stdlib doesn't provide them either:

struct buf { uint8_t * base, size_t size };