Re: Format string usage

On Sat, 2005-12-03 at 21:39 +0200, Ville Skyttä wrote:

> Validator doesn't use *printf(), but the link checker does; I'll comb
> through the code to see if there are any susceptible cases.

Didn't spot any, apart from *_Validator_URI config vars, and exploiting
those would have to happen through more or less deliberate
self-foot-shooting.

Received on Saturday, 3 December 2005 19:50:10 UTC