[Bug string/31974] glibc incorrectly uses __isoc23_sscanf for C++

["euloanty at live dot com" <sourceware-bugzilla@sourceware.org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=31974

--- Comment #26 from cqwrteur <euloanty at live dot com> ---
(In reply to cqwrteur from comment #25)
> (In reply to cqwrteur from comment #24)
> > (In reply to Jonathan Wakely from comment #12)
> > > Try to focus and stay on topic, your irrational hatred of std::format has
> > > nothing to do with this glibc PR. (But it doesn't have the same issue,
> > > because it's header-only so can very easily tailor which format specifiers
> > > are supported based on the current value of __cplusplus, you're mistaken as
> > > usual.)
> > 
> > irrational hatred? Do you even know how many security vulnerabilities were
> > caused by format string and std::format is also very slow and bloated. It is
> > even much slower than stream. And it breaks abi. It causes trouble for
> > compilers to sanitize the imports.
> > 
> > 
> > https://gist.github.com/Au-lit/447f376101674503aac2d721fcee0cd1
> > 
> > How are those points irrational?
> 
> santize the inputs

What Are Format String Vulnerabilities?

https://www.invicti.com/blog/web-security/format-string-vulnerabilities/

-- 
You are receiving this mail because:
You are on the CC list for the bug.