The following text appears under BUGS in the snprintf man page:
Linux libc4.[45] does not have a snprintf(), but provides a
libbsd that contains an snprintf() equivalent to sprintf(),
that is, one that ignores the size argument. Thus, the use of
snprintf() with early libc4 leads to serious security problems.
I've had people cite this as a reason to be wary of using snprintf,
apparently unaware of what libc4 means. IMO it should just be removed;
it's way too old to be relevant.
Rich
--
To unsubscribe from this list: send the line "unsubscribe linux-man" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
