Fwd: [PATCH] Don't allow attackers to inject arbitrary data into stack through LD_DEBUG

[Rich Felker]

On Thu, Aug 13, 2015 at 09:56:42AM +0200, Andreas Schwab wrote:
> Rich Felker <dalias@libc.org> writes:
> 
> > On Mon, Aug 10, 2015 at 11:15:36AM +0200, Andreas Schwab wrote:
> >> Paul Eggert <eggert@cs.ucla.edu> writes:
> >> 
> >> > Presumably the original author didn't know about "%.*s".
> >> 
> >> It didn't exist back then.
> >
> > This is factually incorrect.
> 
> Read the history before making such a bold statement.
> 
> > C89
> 
> _dl_error_printf isn't C89.

OK, I misunderstood the code. Apologies.

Rich