Fwd: [PATCH] Don't allow attackers to inject arbitrary data into stack through LD_DEBUG

[Andreas Schwab]

Rich Felker <dalias@libc.org> writes:

> On Mon, Aug 10, 2015 at 11:15:36AM +0200, Andreas Schwab wrote:
>> Paul Eggert <eggert@cs.ucla.edu> writes:
>> 
>> > Presumably the original author didn't know about "%.*s".
>> 
>> It didn't exist back then.
>
> This is factually incorrect.

Read the history before making such a bold statement.

> C89

_dl_error_printf isn't C89.

Andreas.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."