When the code is sprintf(stackbuf, "%s", attacker_supplied_input) in 2025, I exp... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tlb 12 months ago \| parent \| context \| favorite \| on: The insecurity of telecom stacks in the wake of Sa... When the code is sprintf(stackbuf, "%s", attacker_supplied_input) in 2025, I expect some serious bowing and scraping.

matthewdgreen 12 months ago | [–]

In fairness, with that level of vulnerability in the code, fixing it is like using paper towels to mop up the ocean.

camgunz 12 months ago | [–]

Yeah if anyone thinks people don't just run searches for `sprintf` they're pretty naive.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact