You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@subversion.apache.org by Daniel Shahaf <d....@daniel.shahaf.name> on 2010/12/22 13:32:50 UTC

Re: svn commit: r1051875 - /subversion/trunk/subversion/mod_authz_svn/mod_authz_svn.c

julianfoad@apache.org wrote on Wed, Dec 22, 2010 at 12:48:01 -0000:
> Author: julianfoad
> Date: Wed Dec 22 12:48:01 2010
> New Revision: 1051875
> 
> URL: http://svn.apache.org/viewvc?rev=1051875&view=rev
> Log:
> Fix a printf format-string insecurity. A follow-up to r1030536. Found by
> my compiler.
> 
> * subversion/mod_authz_svn/mod_authz_svn.c
>   (get_access_conf): Insert the error message using "subversion/mod_authz_svn/mod_authz_svn.cs" rather than directly
>     as the format string argument.
> 

So /that/ is why people use Emacs...