Werner Koch <wkat_private> writes: Malicious User <markat_private> writes: > knock it around. I suspect this version will still fail on FreeBSD > (anyone care to offer up an account for me on a FreeBSD system to test Instead of using snprintf() you can you sprintf() and change the "%s" formats to (e.g.) "$%.30s" - somewhat more work but much more portable. Note that snprintf() is in the C9x draft standard, so it will soon be much more common that it is today. As a result, it may not be worth it to try to be more portable through such devices. In addition, it is worth noting that snprintf() as specified by the C9x draft has return value semantics different from those commonly found. As a result, calls to snprintf() where the return value is checked should be scrutinized, since this change could presumably pose a security risk. To cite one place where this changes, glibc 2.1 uses the C9x return value semantics, whereas glibc 2.0 uses the older semantics. -- "You know, they probably have special dorms for people like us." --American Pie
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:01:57 PDT