public inbox for gcc-bugs@sourceware.org
help / color / mirror / Atom feed
* [Bug other/83520] format string bug in libvtv
       [not found] <bug-83520-4@http.gcc.gnu.org/bugzilla/>
@ 2021-11-11 15:51 ` egallager at gcc dot gnu.org
  0 siblings, 0 replies; only message in thread
From: egallager at gcc dot gnu.org @ 2021-11-11 15:51 UTC (permalink / raw)
  To: gcc-bugs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=83520

Eric Gallager <egallager at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |egallager at gcc dot gnu.org

--- Comment #4 from Eric Gallager <egallager at gcc dot gnu.org> ---
(In reply to Touma Hatano from comment #3)
> Sorry for misleading.
> My point was that if we can replace
>   snprintf (program_name, sizeof (program_name), program_invocation_name);
> with
>   snprintf (program_name, sizeof (program_name), "%s",
> program_invocation_name);
> , the program won't crash when program_invocation_name contains format
> specifiers.
> 
> How do you think?

Shouldn't -Wformat-security catch this? If it doesn't, that's a bug, IMO...

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2021-11-11 15:51 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
     [not found] <bug-83520-4@http.gcc.gnu.org/bugzilla/>
2021-11-11 15:51 ` [Bug other/83520] format string bug in libvtv egallager at gcc dot gnu.org

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).