On 9/20/21 1:13 AM, Theo de Raadt wrote:
> Christian Weisgerber <naddy@mips.inka.de> wrote:
>
>> This includes the list of remaining ports with %n warnings:
>>
>> mail/exim
>> net/climm
>
> two left.
>
> here is my brutish attempt to deal with exim, which has a set of
> *printf-like functions which return pointer, and but discard the
> length
>
> in a few cases, %n is at the end, allowing use of strlen() to
> recover the discarded length
>
> in other cases, %n is embedded, and the operation must be split up.
>
> I am unable (and unwilling) to run this in test. Is there anyone who
> can take this on?
>
I am currently testing it on my small home prod server on 6.9.
No comments:
Post a Comment