Fwd: [PATCH] Don't allow attackers to inject arbitrary data into stack through LD_DEBUG

[Andreas Schwab]

Alex <alexinbeijing@gmail.com> writes:

> Andreas, I'm a bit slow here so please help me out: why is the copy
> needed *even if* printf("%s", ...) is used?

Not "even if", but "because".  You need to cut off the string before the
separator.

Andreas.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."