3 ms·
Yes if the attacker has control of the string (like if you do printf(getenv("FOO")) or something equally stupid).
by cozzyd 7y ago
Yes if the attacker has control of the string (like if you do printf(getenv("FOO")) or something equally stupid).