3 ms·
When the code is sprintf(stackbuf, "%s", attacker_supplied_input) in 2025, I expect some serious bowing and scraping.
by tlb 2y ago
When the code is sprintf(stackbuf, "%s", attacker_supplied_input) in 2025, I expect some serious bowing and scraping.
- matthewdgreen 2y agoIn fairness, with that level of vulnerability in the code, fixing it is like using paper towels to mop up the ocean.
- camgunz 2y agoYeah if anyone thinks people don't just run searches for `sprintf` they're pretty naive.