diff options
| author | Greg Steuck <greg@nest.cx> | 2021-11-22 21:38:47 -0800 |
|---|---|---|
| committer | Marge Bot <ben+marge-bot@smart-cactus.org> | 2021-11-25 08:36:09 -0500 |
| commit | e2c48b98c6a201eae09b4c84e73bb77608d03ec8 (patch) | |
| tree | f45e4cfc42b3c473b21ecd6f8088ac8f48bcb419 /libraries/base/Data/Array | |
| parent | 20101d9ca016fca17605dd4f641640a60bdadca4 (diff) | |
| download | haskell-e2c48b98c6a201eae09b4c84e73bb77608d03ec8.tar.gz | |
Kill a use of %n format specifier
This format has been used as a security exploit vector for decades
now. Some operating systems (OpenBSD, Android, MSVC). It is targeted
for removal in C2X standard:
http://www.open-std.org/jtc1/sc22/wg14/www/docs/n2834.htm
This requires extending the debug message function to return the
number of bytes written (like printf(3)), to permit %n format
specifier in one in one invocation of statsPrintf() in
report_summary().
Implemented by Matthias Kilian (kili<AT>outback.escape.de)
Diffstat (limited to 'libraries/base/Data/Array')
0 files changed, 0 insertions, 0 deletions
