[SSSD] [PATCH] Don't pass user input as a printf format string argument

Stef Walter stefw at redhat.com
Tue Jan 7 13:57:39 UTC 2014


On 07.01.2014 14:07, Stef Walter wrote:
> Anyhow, here's a patch which aims to make the full_name_format printf
> handling both correct and safe.

...

> I'll be happy to split the patch into two, if desired. One which adds
> safe-printf.[ch] + tests, and the second which fixes the fully qualified
> names.

Now split for easier review.

Stef

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-util-A-safe-printf-for-user-provided-format-strings.patch
Type: text/x-patch
Size: 18372 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20140107/5906fa78/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-NSS-Don-t-use-printf-3-on-user-provided-strings.patch
Type: text/x-patch
Size: 25708 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20140107/5906fa78/attachment-0001.bin>


More information about the sssd-devel mailing list