summaryrefslogtreecommitdiff
path: root/lib/libc/stdio/printf.3
diff options
context:
space:
mode:
authorChris Costello <chris@FreeBSD.org>2002-01-06 21:16:41 +0000
committerChris Costello <chris@FreeBSD.org>2002-01-06 21:16:41 +0000
commite125c135a88a6a1995006a1c03a8ebfcd7179c7c (patch)
tree9824d4861f319f4df52618ace7d1bfb8f9ba4139 /lib/libc/stdio/printf.3
parent48dac05955ac0ae4f22cbc790b98ac4111e99ad7 (diff)
Notes
Diffstat (limited to 'lib/libc/stdio/printf.3')
-rw-r--r--lib/libc/stdio/printf.316
1 files changed, 16 insertions, 0 deletions
diff --git a/lib/libc/stdio/printf.3 b/lib/libc/stdio/printf.3
index c16c261a91ed..6718bf48d2a0 100644
--- a/lib/libc/stdio/printf.3
+++ b/lib/libc/stdio/printf.3
@@ -688,10 +688,26 @@ char *newfmt(const char *fmt, ...)
return (p);
}
.Ed
+.Sh SECURITY CONSIDERATIONS
+The
+.Fn sprintf
+and
+.Fn vsprintf
+functions are easily misused in a manner which enables malicious users
+to arbitrarily change a running program's functionality through
+a buffer overflow attack.
+(See
+the FSA
+and
+.Sx EXAMPLES . )
.Sh SEE ALSO
.Xr printf 1 ,
.Xr scanf 3 ,
.Xr setlocale 3
+.Rs
+.%T "The FreeBSD Security Architecture"
+.%J "/usr/share/doc/{to be determined}"
+.Re
.Sh STANDARDS
The
.Fn fprintf ,