[Bug c/72783] Fortify scanf %s, %[ conversion specifiers

2022-01-26 Thread msebor at gcc dot gnu.org via Gcc-bugs
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=72783 Martin Sebor changed: What|Removed |Added Assignee|msebor at gcc dot gnu.org |unassigned at gcc dot gnu.org

[Bug c/72783] Fortify scanf %s, %[ conversion specifiers

2020-05-27 Thread egallager at gcc dot gnu.org
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=72783 Eric Gallager changed: What|Removed |Added CC||egallager at gcc dot gnu.org --- Comment

[Bug c/72783] Fortify scanf %s, %[ conversion specifiers

2019-06-27 Thread egallager at gcc dot gnu.org
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=72783 Eric Gallager changed: What|Removed |Added Status|NEW |ASSIGNED CC|

[Bug c/72783] Fortify scanf %s, %[ conversion specifiers

2017-03-07 Thread msebor at gcc dot gnu.org
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=72783 --- Comment #5 from Martin Sebor --- (In reply to felix from comment #4) > > By the way: in my report, I suggested making -Wformat-security enable this > warning. Will -Wformat-length be implied by -Wformat-security? I think the role of -Wforma

[Bug c/72783] Fortify scanf %s, %[ conversion specifiers

2017-03-07 Thread felix.von.s at posteo dot de
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=72783 felix changed: What|Removed |Added CC||felix.von.s at posteo dot de --- Comment #4 from

[Bug c/72783] Fortify scanf %s, %[ conversion specifiers

2017-01-11 Thread msebor at gcc dot gnu.org
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=72783 --- Comment #3 from Martin Sebor --- I've run out of time to implement this in GCC 7 but I'll see about handling it in GCC 8.

[Bug c/72783] Fortify scanf %s, %[ conversion specifiers

2016-08-03 Thread msebor at gcc dot gnu.org
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=72783 Martin Sebor changed: What|Removed |Added Status|UNCONFIRMED |NEW Last reconfirmed|

[Bug c/72783] Fortify scanf %s, %[ conversion specifiers

2016-08-03 Thread fw at gcc dot gnu.org
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=72783 --- Comment #1 from Florian Weimer --- Martin and I discussed this for a bit. The %ms hack does not work due to embedded NULs, which are copied to the destination buffer by scanf, do not terminate the string, and are (in most cases) detectable b