Brendan Jones wrote:
>Patching is not a problem. Unnecessary is the question. Explain to me 
>(not you in particular Rahul) how these printf's can possibly be
>exploited?

Even if you could prove that a % can never occur in any of these
strings, so that the error can't even cause a crash in any of these
cases, there is still a bit of performance to be gained in many cases.
Why waste cycles looking for a % in every position in a long string
when you know there aren't supposed to be any formatting codes?

Björn Persson

Attachment: signature.asc
Description: PGP signature

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Reply via email to