Bugtraq mailing list archives

libdb snprintf under Digital Unix


From: krinsky () HCS HARVARD EDU (David Krinsky)
Date: Thu, 10 Jul 1997 14:34:50 -0400


Digital Unix 4.0x's libdb also appears to contain a useless wrapper for
sprintf going by the name of snprintf.  A quick test shows that it drops
the length field completely and just does a regular sprintf.

As there is no snprintf in libc as yet, there has been some talk on
alpha-osf-managers () ornl gov, if not here, about linking in this snprintf to
fix potential buffer overruns.

This would appear to be a futile endeavor.

Dave.



Current thread: