Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 1 Sep 1995 06:47:28 +1000
From:      Bruce Evans <bde@zeta.org.au>
To:        freebsd-security@freebsd.org, peter@haywire.dialix.com
Subject:   Re: Eric Allman's syslog.c fixes
Message-ID:  <199508312047.GAA08688@godzilla.zeta.org.au>

next in thread | raw e-mail | index | archive | help
>Eric Allman is running a new syslog.c through the mill at the
>moment. It'll be the one published in the RSN CERT advisory I presume.

>It's thought to be bomproof on 4.4BSD systems (it uses vsnprintf), and
>the only holdup is portability to other OS's.

The one posted here didn't check the format conversion.  pst's version
was more complete.

Someone suggested using %.*s instead of snprintf.  That works well for
the format conversion.

Bruce



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199508312047.GAA08688>