[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CUPS

On Thu, Feb 26, 2004 at 08:54:11PM +0530, Mayuresh Kathe wrote:
> On Thu, 26 Feb 2004, Javier Solorzano wrote:
> 
> > Anyone knows the reason why openbsd is so Cups negative?
> 
> The last time I read about CUPS it was full of buffer overflow bugs.
> Also, it is under the GPL.

Well, that was a while ago.  A lot of those have been fixed.  However,
there are still a lot of sprintf()s in the code (even though there's a
snprintf() implementation in the CUPS sources if the host OS doesn't
have snprintf()), and apparently some incorrect uses of sizeof().

What I don't get is that CUPS is the default print system for a lot of
OSes, but apparently none of them care to make CUPS more secure.

-- 
<jakemsr@jakemsr.com>