Re: FTBFS if "-Werror=format-security" flag is used

Przemek Klosowski <przemek.klosowski@xxxxxxxx> · Mon, 9 Dec 2013 17:33:17 -0500



    On 12/06/2013 09:21 AM, Ralf Corsepius
      wrote:

    
      printf(string) is legitimate C, forcing "printf("%s", string) is
      just silly.
      

    My apologies for being repetitive, but the original point is that
    printf(string) is insecure unless you can guarantee that you control
    'string' now and forever. Also,  %s is the format for printing
    strings, so I just can't agree that coding printf("%s", string) is
    silly. 

  
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct