| |||||||||||||
In 2011?In 2011?Posted Feb 3, 2012 12:42 UTC (Fri) by NAR (subscriber, #1313)In reply to: In 2011? by geofft Parent article: Format string vulnerabilities
If the format string comes from (potentially untrusted) source, then we're screwed anyway, that has to be verified along with the arguments. And probably that is the right time to generate the output string too (at least the parts coming from the user).
(Log in to post comments)
|
|||||||||||||