diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2009-03-08 22:42:50 +0000 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2009-03-08 22:42:50 +0000 |
| commit | 9274d3169089f86f7ba1b3553585cfe6a2747f2e (patch) | |
| tree | e33b3309e9017a3a95560cc2691c369de46b83cd /CHANGES | |
| parent | 983a53950399a8a9b60b97b99884935aba2c4c9e (diff) | |
- Bill Egert pointed out (http://curl.haxx.se/bug/view.cgi?id=2671602) that
curl didn't use sprintf() in a way that is documented to work in POSIX but
since we use our own printf() code (from libcurl) that shouldn't be a
problem. Nonetheless I modified the code to not rely on such particular
features and to not cause further raised eyebrowse with no good reason.
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -6,6 +6,13 @@ Changelog +Daniel Stenberg (8 Mar 2009) +- Bill Egert pointed out (http://curl.haxx.se/bug/view.cgi?id=2671602) that + curl didn't use sprintf() in a way that is documented to work in POSIX but + since we use our own printf() code (from libcurl) that shouldn't be a + problem. Nonetheless I modified the code to not rely on such particular + features and to not cause further raised eyebrowse with no good reason. + Daniel Fandrich (5 Mar 2009) - Expanded the security section of the libcurl-tutorial man page to cover more issues for authors to consider when writing robust libcurl-using |