> In message <[EMAIL PROTECTED]> "John Doh!" writes:
> : Issue is must be getting format string from "untrusted" place, but want to
> : limit substitution of %... to the substitution of say in example the
> : argv[0], but to not do others so that say given "usage: %s filename %p" %p
> : not interpret but to be print instead as literally so we get output of
> : (saying to be argv[0] as test just for example) usage: test filename %p
> :
> : any hints you have I am very greatful for.
>
> Fix gettext to only allow N arguments in the same order that the
> original message had.
Typically you want to use positional arguments with printf so that your
gettext responses can reorder things to get better results, but the same
basically applies.
--
... every activity meets with opposition, everyone who acts has his
rivals and unfortunately opponents also. But not because people want
to be opponents, rather because the tasks and relationships force
people to take different points of view. [Dr. Fritz Todt]
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message
