security.cpp contains a few invalid implicit conversions between pointer types that will not fly when the permissive- compiler option is active. Given that permissive- will become the Visual C++ compiler's default mode of operation in the future, it is better to handle this now so future compiler upgrades will not cause issues. Problems here are very easily solved with explicit casts