First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 5694
Product:  
Component:  
Status: NEW
Resolution:
Assigned To: Not yet assigned to anyone <unassigned@gcc.gnu.org>
Host:
Reported against  
Priority:  
Severity:  
Target Milestone:  
 
 
Target:
Reporter: greendeath@mail.ru
Add CC:
CC:
Remove selected CCs
Build:
URL:
Summary:
Keywords:
Known to work:
Known to fail:

Attachment Description Type Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 5694 depends on: Show dependency tree
Show dependency graph
Bug 5694 blocks:

Additional Comments:





Mark bug as waiting for feedback
Mark bug as suspended




View Bug Activity   |   Format For Printing   |   Clone This Bug


Description:   Last confirmed: 2005-12-18 00:35 Opened: 2002-02-14 17:26
gcc during link time write warning about using gets() - it's dangerous and so
on.

I propose to add vsprintf() ti list of dangerouse functions whick can cause
stack problem. May be add "use vsnprintf() instead".

Possible this warning can come in compiling time.

Release:
2.96

Environment:
Linux and I beleive any :-)

------- Comment #1 From Dara Hazeghi 2003-05-27 04:55 -------
Hello,

well I'm sure that this would be nice, though there are plenty of other potentially dangerous 
functions. However at this point we certainly don't deal with this...

Dara

------- Comment #2 From Andrew Pinski 2003-05-27 13:34 -------
See Dara's comment:
other functions which gcc should warn about, sprintf, strcpy, and strcat.

------- Comment #3 From Joseph S. Myers 2004-09-24 22:46 -------
The link-time warnings are in the domain of glibc, not GCC.

Jakub's patch <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02424.html>
provides for compile-time and runtime detection of some overflow cases,
and I think that is as much as is reasonable to go in GCC.  So once that
is in GCC, I think this bug should be closed.

------- Comment #4 From Andrew Pinski 2005-09-18 01:13 -------
(In reply to comment #3)
> Jakub's patch <http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02424.html>
> provides for compile-time and runtime detection of some overflow cases,
> and I think that is as much as is reasonable to go in GCC.  So once that
> is in GCC, I think this bug should be closed.

Well it does not help other OS's other than glibc and newer glibc at that.

First Last Prev Next    No search results available      Search page      Enter new bug