You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Brian Behlendorf <br...@hyperreal.com> on 1997/01/27 19:39:38 UTC

Re: Apache 1.2b6 Released! (fwd)

First candidate for HAVE_SNPRINTF I suppose.

	Brian

--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--
brian@hyperreal.com     http://www.apache.org     http://www.organic.com/jobs

---------- Forwarded message ----------
Date: Mon, 27 Jan 1997 08:21:58 -0800
From: Fred Condo <fr...@lightside.net>
To: apache@apache.org
Subject: Re: Apache 1.2b6 Released!

At 3:21 AM -0800 1/27/97, Brian Behlendorf wrote:
>Most significantly, we have replaced a majority of the calls to "sprintf"
>to "snprintf", which should help prevent the type of stack-scribbling hole
>as was found recently in mod_cookies.  Because "snprintf" isn't in
>libraries on all machines, we have provided our own snprintf utility - if
>your platform has an "snprintf" routine which is considered stable and
>robust, let us know at apache@apache.org and we will consider having it
>use the native version on your platform. By default Apache will use its
>own snprintf routine.

FreeBSD 2.X has the snprintf routine, as I'm sure many people have told you
by now :)