Ubuntu
glibc package

  1. Bug #305901
  2. Comment #38

Comment 38 for bug 305901

Revision history for this message
In , Kees Cook (kees) wrote :

Created attachment 3625
work-around pre-trunc behavior

This patch restores the prior sprintf behavior. Looking through
_IO_str_init_static_internal seems to indicate that nothing actually requires
"s" to lead with a NULL. Is there anything wrong with this work-around, which
could be used until the number of affected upstream sources is not quite so
large?