d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Don't generate syslog() statements which have format string vulnerabilities.

Browse Source 
MFC after:	1 week
This commit is contained in:
Kris Kennaway 2001-07-05 08:17:41 +00:00
parent 2c0643afde
commit 69c828c6bc
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=79295
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
usr.bin/rpcgen/rpc_svcout.c
View File

@ -769,12 +769,12 @@ write_msg_out(void)
f_print(fout, "#ifdef RPC_SVC_FG\n");
if (inetdflag || pmflag)
f_print(fout, "\tif (_rpcpmstart)\n");
f_print(fout, "\t\tsyslog(LOG_ERR, msg);\n");
f_print(fout, "\t\tsyslog(LOG_ERR, \"%%s\", msg);\n");
f_print(fout, "\telse\n");
f_print(fout,
"\t\t(void) fprintf(stderr, \"%%s\\n\", msg);\n");
f_print(fout, "#else\n");
f_print(fout, "\tsyslog(LOG_ERR, msg);\n");
f_print(fout, "\tsyslog(LOG_ERR, \"%%s\", msg);\n");
f_print(fout, "#endif\n");
f_print(fout, "}\n");
}