cdbae7782

Rob Landley

2005-12-12

SOURCE BUG Duration: 8s

Subject

printf() arguments shouldn't be passed straight from user supplied data. (Security thingy.)

SOURCE BUG

This commit was genuinely broken at the time (not related to our build system): scripts/config/mkconfigs.c (2005-08-01 - 2006-10-05 arasi) uretilen bbconfigopts.h icine .config satirlarini kacissiz, ham newline'larla gömüyordu - gecerli C degildi, busybox'un kendi bb_mkdep araci bile parse edemiyordu (7d219aab7 ile duzeltildi, mkconfigs shell scripte cevrildi)

→ Bu hatanin tam hikayesini ve duzeltme diffini gor

Binary

No binary (build failed)

Architecture & Compiler Flags

Architecture: x86_64-linux-gnu Compiler: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0

—

Build Log

(log yok)

Commit Diff GitHub →

coreutils/ln.c +1 -1

coreutils/ln.c+1 -1

@@ -106,7 +106,7 @@ extern int ln_main(int argc, char **argv)
	}

	if (link_func(*argv, src) != 0) {
-	bb_perror_msg(src);
+	bb_perror_msg("%s", src);
	status = EXIT_FAILURE;
	}