nia
Yeah, unlike you I can admit when I'm wrong. snprintf() does return, SOMETIMES, the same information as strlcpy.
Sorry about not being pedantic enough.
A nice example:
strlcpy(from,from,20); // Assuming from is more than 20 bytes in capacity, it will return 19. Bravo.
snprintf(from,20,"%s",from); // Returns 0. (As specified - undefined behaviour).
But, I will be pedantic about libressl and openssl. I said "had exploits like ". I should have put "had exploits anything like".
My bad. Fact remains, openssl was a sieve compared to libressl.
I don't speak for openbsd, merely pointing out that neither was the OP nor is the web page attempting to claim all the listed items as invented by openbsd.
