[Fribidi-discuss] Building fribidi on OSF1 alpha: snprintf

Nadav Har'El nyh at math.technion.ac.il
Wed Jan 23 04:00:09 EST 2002


On Wed, Jan 23, 2002, Omer Zak wrote about "Re: [Fribidi-discuss] Building fribidi on OSF1 alpha: snprintf":
> ... and of course, several computers are cracked into by exloiting buffer
> overflows.  Let's stamp out sprintf everywhere we see it.  Even where it
> doesn't seem to cause harm today.  Code gets maintained, and tomorrow
> someone may neglect to prove that sprintf-created strings don't overflow
> their allotted space.

Why not use snprintf, and if snprintf is not available (you ARE using
autoconf, aren't you?) #define it to be sprintf?

-- 
Nadav Har'El                        |   Wednesday, Jan 23 2002, 10 Shevat 5762
nyh at math.technion.ac.il             |-----------------------------------------
Phone: +972-53-245868, ICQ 13349191 |I have an open mind - it's just closed
http://nadav.harel.org.il           |for repairs.




More information about the FriBidi mailing list