Frank Lichtenheld <[EMAIL PROTECTED]> writes: > char path[256]; > sprintf( path, "some string/%s", packagename);
> Is such code (away from the fact that it can easily lead to segfaults) a > security problem? In general, yes.
Frank Lichtenheld <[EMAIL PROTECTED]> writes: > char path[256]; > sprintf( path, "some string/%s", packagename);
> Is such code (away from the fact that it can easily lead to segfaults) a > security problem? In general, yes.