[bug #37738] Gets is a security hole

[WorMzy Tykashi]

URL:
  <http://savannah.gnu.org/bugs/?37738>

                 Summary: Gets is a security hole
                 Project: GNU GRUB
            Submitted by: wormzy
            Submitted on: Thu 15 Nov 2012 03:02:57 AM GMT
                Category: Compilation
                Severity: Major
                Priority: 5 - Normal
              Item Group: Action Request
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: 
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
                 Release: 
                 Release: Bazaar - trunk
         Reproducibility: Every Time
         Planned Release: None

    _______________________________________________________

Details:

Compiling grub2 with glibc 2.16 results in a compilation failure due to 'gets'
undeclaration:-

x86_64-unknown-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../..  -I../../intl    -MT
argp-eexst.o -MD -MP -MF .deps/argp-eexst.Tpo -c -o argp-eexst.o argp-eexst.c
In file included from argp.h:22:0,
                 from argp-eexst.c:25:
./stdio.h:456:1: error: 'gets' undeclared here (not in a function)

-----

Working solution is to remove line 144 --

_GL_WARN_ON_USE (gets, "gets is a security hole - use fgets instead");

-- from grub/grub-core/gnulib/stdio.in.h in svn.

Building on Arch Linux.

glibc - 2.16.0
gettext - 0.18.1.1
autoconf - 2.69
automake - 1.12.4
binutils - 2.23
gcc - 4.7.2
libtool - 2.4.2
m4  1.4.16
make - 3.82
pkg-config - 0.27.1



    _______________________________________________________

File Attachments:


-------------------------------------------------------
Date: Thu 15 Nov 2012 03:02:57 AM GMT  Name: build.log  Size: 50kB   By:
wormzy
Build log of unsuccessful build
<http://savannah.gnu.org/bugs/download.php?file_id=26913>

    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?37738>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/