Re: [Devil-linux-develop] 1.3 compile message?

[Oliver N. <dig...@gm...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


>> Coreutils passed all checks on my build station.
> 
> OK, I guess I won't worry about the message then.  :-)
> 
>  - BS

I had the same message, but everything works normal.

But nevertheless maybe someone smarter than me should look what causes the problem,
because as far as i know, this message has something to do with a format string error.
And as a "security product" we should care eventually :-/

That's what i found:
> No, that's not the point.  It doesn't matter whether the target of the
> %n is writable; if it's not, we'll just segfault.  The test is supposed
> to prevent a malicious attacker inserting %n into the application
> somewhere where it will be passed to printf, causing an unexpected
> store.

Here is the full message:
> http://sources.redhat.com/ml/libc-alpha/2006-02/msg00078.html

..but though - this has nothing to do with coreutils, but....

- ----

Olli

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org

iD8DBQFH80p5724ZL5LNhNcRAplkAJ9X1Ghyjqx0Rq6aiYoVJlBUdGIBuwCfauW4
gP8P54/dvN1piID+WYYSTH4=
=/yoq
-----END PGP SIGNATURE-----