[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: is OpenBSD Bind 4.9.7 vulnerable to the newest buffer overflows??



On Tue, Jan 30, 2001 at 08:15:45AM -0600, James Moore wrote:
> On 30 Jan 2001,, Andreas Gunnarsson wrote:
> 
> > > According to 'cvs annotate' those printfs were changed to sprintfs by
> > > Theo in april 1997.
> > 
> > I obviously meant to say 'those sprintf()s were changed to snprintf()s'
> > Sorry, it's too early in the morning for me...
> 
> According to the reference I have at hand, snprintf is not part of ANSI 
> C. Is it an "OpenBSD-only function"?

No, its not OpenBSD only.  The latest ISO C standard (C99) does include
it as well.  (7.19.6.5 The snprintf function)  Even if you find a 
system that doesn't include it, you know where to find the source code
freely available for use under a BSD license. ;)

--
Dan Harnett <danh@wzrd.com>