This is the mail archive of the
gcc-bugs@gcc.gnu.org
mailing list for the GCC project.
[Bug c/32448] Security - abs / printf bug
- From: "rob1weld at aol dot com" <gcc-bugzilla at gcc dot gnu dot org>
- To: gcc-bugs at gcc dot gnu dot org
- Date: 28 Jun 2007 18:32:06 -0000
- Subject: [Bug c/32448] Security - abs / printf bug
- References: <bug-32448-13830@http.gcc.gnu.org/bugzilla/>
- Reply-to: gcc-bugzilla at gcc dot gnu dot org
------- Comment #22 from rob1weld at aol dot com 2007-06-28 18:32 -------
Why is it a bad idea to leave this flaw in GCC ?
Format String Bugs and Exploits
http://www.geocities.com/ravecoolr/fmt.doc
or if you like:
http://www.enderunix.org/docs/formatstr.txt
Allowing GCC to stay as-is and permit someone to use a user supplied format
string to print an integer opens a whole field of exploits that could be closed
by fixing this.
--
rob1weld at aol dot com changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|abs / printf bug |Security - abs / printf bug
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=32448