Re: [AD] buffer overflow in /src/allegro.c

[ Thread Index | Date Index | More lists.liballeg.org/allegro-developers Archives ]


> the sprintf()  could be updated now??

Is it really worth it?

> in DJGPP one needs to install djdev204.zip to get snprintf()

Do you know how stable the 2.04 release is?  I might give it a try soon.

> functionality. but maybe the unicode version could be used for better
> protection against buffer overflow.

The assert subsystem only uses ASCII.  We would need to temporarily switch 
the library-wide encoding format, which is not very nice.

-- 
Eric Botcazou




Mail converted by MHonArc 2.6.19+ http://listengine.tuxfamily.org/