mailing list archives
Re: Format strings: bug #1: BSD-lpr
From: Kris Kennaway <kris () FREEBSD ORG>
Date: Tue, 26 Sep 2000 00:02:48 -0700
On Tue, 26 Sep 2000, Chris Evans wrote:
OpenBSD ship BSD-lpr. Not only have they already fixed this in their CVS,
but they also offer web indexed CVS. They caught it independently as part
of their "format strings" audit.
It seems FreeBSD fixed this one back in 1997:
(I was worried for a second there when I didnt remember catching this one
in our recent audit sweep ;-)
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <forsythe () alum mit edu>