Linux Manual Pages development
 help / color / mirror / Atom feed
From: Rich Felker <dalias-8zAoT0mYgF4@public.gmane.org>
To: "Michael Kerrisk (man-pages)"
	<mtk.manpages-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
Cc: "linux-man-u79uwXL29TY76Z2rM5mHXA@public.gmane.org"
	<linux-man-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>
Subject: Outdated scare text in snprintf man page
Date: Sat, 28 Jun 2014 23:45:49 -0400	[thread overview]
Message-ID: <20140629034549.GX179@brightrain.aerifal.cx> (raw)

The following text appears under BUGS in the snprintf man page:

       Linux libc4.[45] does not have a snprintf(), but provides a
       libbsd that contains an snprintf() equivalent to sprintf(),
       that is, one that ignores the size argument. Thus, the use of
       snprintf() with early libc4 leads to serious security problems.

I've had people cite this as a reason to be wary of using snprintf,
apparently unaware of what libc4 means. IMO it should just be removed;
it's way too old to be relevant.

Rich
--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

             reply	other threads:[~2014-06-29  3:45 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2014-06-29  3:45 Rich Felker [this message]
     [not found] ` <20140629034549.GX179-C3MtFaGISjmo6RMmaWD+6Sb1p8zYI1N1@public.gmane.org>
2014-06-29  6:29   ` Outdated scare text in snprintf man page Michael Kerrisk (man-pages)

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20140629034549.GX179@brightrain.aerifal.cx \
    --to=dalias-8zaot0mygf4@public.gmane.org \
    --cc=linux-man-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
    --cc=mtk.manpages-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox