Fwd: [PATCH] Don't allow attackers to inject arbitrary data into stack through LD_DEBUG

Andreas Schwab schwab@suse.de
Mon Aug 10 09:15:00 GMT 2015


Paul Eggert <eggert@cs.ucla.edu> writes:

> Presumably the original author didn't know about "%.*s".

It didn't exist back then.

Andreas.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."



More information about the Libc-alpha mailing list