On Tue, 2 Sep 2003, Richard A. O'Keefe wrote:
> 
> By the way, is anyone else worried about this code:
> 
>     static SEXP applydefine(SEXP call, SEXP op, SEXP args, SEXP rho)
>     {
>       ...
> =======>char buf[32];
>       ...
>       while (isLanguage(CADR(expr))) {
> ===========>sprintf(buf, "%s<-", CHAR(PRINTNAME(CAR(expr))));
>           tmp = install(buf);
> 

Yes -- Brian added code to check this and similar buffer overflows to
R-devel a while ago.

luke

-- 
Luke Tierney
University of Iowa                  Phone:             319-335-3386
Department of Statistics and        Fax:               319-335-3017
   Actuarial Science
241 Schaeffer Hall                  email:      [EMAIL PROTECTED]
Iowa City, IA 52242                 WWW:  http://www.stat.uiowa.edu

______________________________________________
[EMAIL PROTECTED] mailing list
https://www.stat.math.ethz.ch/mailman/listinfo/r-help

Reply via email to