"Sergio" == Sergio Cuéllar Valdés <[EMAIL PROTECTED]> writes:

    Sergio> sprintf(message, "/usr/local/bin/say -s 4 -a \"%s\"", buffer);

Note that this is a classic security problem since both message and
buffer are exactly the same size (BUFSIZE == 1024). Use snprintf or
otherwise validate the size.

Cheers!
Shyamal

Reply via email to