[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openpkg-users
Subject:    Re: patches for 1.1.0 to fix snprintf
From:       "Ralf S. Engelschall" <rse () engelschall ! com>
Date:       2002-11-16 7:50:36
[Download RAW message or body]


In article <sdd38974.058@aahdq01-ms28.aa.com> you wrote:

> Problem is related to not having vsnprintf/snprintf on host system (in my
> case, solaris 2.5.1).  The first patch fixes this problem in rpm.  You will
> also need to apply the second patch to the openpkg.spec.  Hope this helps
> someone else out there.

Hmmmm... although this solved the building on your platform it
introduces security holes (buffer overflows!). So we cannot incorporate
this patch as is into the official sources. The more correct way would
be to provide a fallback implementation for snprintf(), I think.

                                       Ralf S. Engelschall
                                       rse@engelschall.com
                                       www.engelschall.com
______________________________________________________________________
The OpenPKG Project                                    www.openpkg.org
User Communication List                      openpkg-users@openpkg.org
[prev in list] [next in list] [prev in thread] [next in thread]