Re: [leafnode-list] 2.0b3 compile-time warnings

[krasel@xxxxxxxxxxxxxxxxxxxxxxxxxxxx (Cornelius Krasel)]

Matthias Andree wrote:

[...]

> Some things remain:
> * getting rid of all sscanf (will do later)

Why is this desirable? Methinks that writing your own parsing functions
for all kinds of strings is *really* error-prone. I think the only
possibility of a sscanf()-caused buffer overflow would be in nntpd.c,
doauthinfo():
	if ( sscanf( arg, "%s %s", cmd, param ) != 2 )
Everywhere else, sscanf() is only used to extract ints/longs from
strings.

Curious,
--Cornelius.

-- 
/* Cornelius Krasel, U Wuerzburg, Dept. of Pharmacology, Versbacher Str. 9 */
/* D-97078 Wuerzburg, Germany   email: phak004@xxxxxxxxxxxxxxxxxxxxxx  SP4 */
/* "Science is the game we play with God to find out what His rules are."  */

-- 
leafnode-list@xxxxxxxxxxxxxxxxxxxxxxxxxxxx -- mailing list for leafnode
To unsubscribe, send mail with "unsubscribe" in the subject to the list