[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SOLVED: Daemon Programming



    "Sergio" == Sergio Cuéllar Valdés <herrsergio@gmail.com> writes:

    Sergio> sprintf(message, "/usr/local/bin/say -s 4 -a \"%s\"", buffer);

Note that this is a classic security problem since both message and
buffer are exactly the same size (BUFSIZE == 1024). Use snprintf or
otherwise validate the size.

Cheers!
Shyamal



Reply to: