summaryrefslogtreecommitdiff
path: root/libraries/base/Data/Array
diff options
context:
space:
mode:
authorGreg Steuck <greg@nest.cx>2021-11-22 21:38:47 -0800
committerMarge Bot <ben+marge-bot@smart-cactus.org>2021-11-25 08:36:09 -0500
commite2c48b98c6a201eae09b4c84e73bb77608d03ec8 (patch)
treef45e4cfc42b3c473b21ecd6f8088ac8f48bcb419 /libraries/base/Data/Array
parent20101d9ca016fca17605dd4f641640a60bdadca4 (diff)
downloadhaskell-e2c48b98c6a201eae09b4c84e73bb77608d03ec8.tar.gz
Kill a use of %n format specifier
This format has been used as a security exploit vector for decades now. Some operating systems (OpenBSD, Android, MSVC). It is targeted for removal in C2X standard: http://www.open-std.org/jtc1/sc22/wg14/www/docs/n2834.htm This requires extending the debug message function to return the number of bytes written (like printf(3)), to permit %n format specifier in one in one invocation of statsPrintf() in report_summary(). Implemented by Matthias Kilian (kili<AT>outback.escape.de)
Diffstat (limited to 'libraries/base/Data/Array')
0 files changed, 0 insertions, 0 deletions