Re: lynx-dev Some more security issues in Lynx...

[dickey]

> 
> I seem to recall, either earlier this year here, or on another ml I am
> on, someone was discussing a freely available printf like function which
> dynamically allocated the buffer that was used.  That would be _much_
> better that snprintf, which at least on solaris doesn't define what
> happens if formatting the string exceeds the buffer that is given. 

The only ones I can recall were very much dependent on the underlying I/O
library.  I can take a look if someone has a pointer, but I prefer to not
tie things to a particular library.  I wrote a portable one for ncurses
last year (for testing purposes) but I don't _use_ it because it makes the
program run more slowly.

> --  
> Larry W. Virden                 INET: address@hidden 
> <URL:http://www.purl.org/NET/lvirden/> <*> O- "We are all Kosh." 
> Unless explicitly stated to the contrary, nothing in this posting should  
> be construed as representing my employer's opinions. 


-- 
Thomas E. Dickey
address@hidden
http://www.clark.net/pub/dickey