3 ms·
> The licupgr binary has an sprintf that an authenticated user can use to trigger a stack buffer overflow. The printf family is responsible for so many problem
by shakna 8y ago
> The licupgr binary has an sprintf that an authenticated user can use to trigger a stack buffer overflow.
The printf family is responsible for so many problems. Few people seem to know how to use it safely, or when to use something else.
> only approximately 30 percent of vulnerable modems have been patched, which leaves approximately 200,000 routers...
Welcome to the botnet. Combining the two bugs gives root, and that's a large enough collection of devices to target.
- aaaaaaaaaab 8y ago>Few people seem to know how to use it safely, or when to use something else. I was taught printf should only be used for quick n dirty debugging.
- bottled_poe 8y agoPlease just use a decent logging library and debugger... it will up you productivity, you will learn important skills and you will write cleaner code and you will prevent issues like this one.