Karl Fogel wrote:
> Richard Hansen <rhansen_at_bbn.com> writes:
>> The variable-length array usage is probably hardest to work around. A
>> functional snprintf is likely to be available, but if not, I can
>> probably steal snprintf from <http://www.ijs.si/software/snprintf/> or
>> one of the BSDs.
>
> Well, you can also use anything APR or APR-UTIL provides, since
> Subversion already depends on them. There is an apr_snprintf().
>
> There may be other things you can use to replace the variable-length
> arrays. Like
>
> svn_string_t
> svn_stringbuf_t
> apr_array_header_t
>
> ?
Hmm, I think I'd prefer my setuid binaries to be sticking with C
builtins over library functions where possible, in the name of
minimizing the amount of code that runs with elevated privileges.
Max.
Received on 2008-05-06 22:41:54 CEST