about the usage of sprintf in gdb, specifically in gdb/remote.c

Eli Zaretskii eliz@gnu.org
Thu May 26 03:47:00 GMT 2005


> Date: Thu, 26 May 2005 02:37:08 -0700 (PDT)
> From: Wu Zhou <woodzltc@cn.ibm.com>
> cc: gdb@sources.redhat.com, gdb-patches@sources.redhat.com,
>         mark.kettenis@xs4all.nl
> 
> BTW, what is your point on my analysis in section 3.1.  I believe
> it might incur an overflow.

I think so too.

> But I need to design a scenario to verify that.

That's my point exactly: you don't need to go to such lengths.  If it
isn't 100% obvious that no overflow is possible, we should remove
sprintf in favor of safer functions.



More information about the Gdb-patches mailing list