Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HIME 的字串處理上的 security 問題 #216

Open
Tetralet opened this issue Jan 17, 2012 · 2 comments
Open

HIME 的字串處理上的 security 問題 #216

Tetralet opened this issue Jan 17, 2012 · 2 comments
Milestone

Comments

@Tetralet
Copy link
Contributor

HIME 的程式碼裡大量使用了 strcpy() 及 sprintf() 等等不是很安全的函式,
雖然說機率不高,但還是有潛在的安全問題,建議還是修掉會比較妥當。

@ghost
Copy link

ghost commented Jun 30, 2012

efff98f

@marktwtn
Copy link
Contributor

marktwtn commented Jun 1, 2018

commit: 1ab9323

把大部分的 sprintf() 改成 snprintf(),除了有些需要額外謹慎處理的 sprintf() 先暫時放置
原本 @petercommand 就有做這方面的修改,只是後來又 revert 回去

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants