From owner-freebsd-security  Sat Feb  8 13:05:51 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id NAA29502
          for security-outgoing; Sat, 8 Feb 1997 13:05:51 -0800 (PST)
Received: from rover.village.org (rover.village.org [204.144.255.49])
          by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id NAA29480
          for <freebsd-security@freebsd.org>; Sat, 8 Feb 1997 13:05:41 -0800 (PST)
Received: from rover.village.org [127.0.0.1] 
	by rover.village.org with esmtp (Exim 0.56 #1)
	id E0vtJxM-0002dm-00; Sat, 8 Feb 1997 14:05:08 -0700
To: Brian Tao <taob@risc.org>
Subject: Re: Don't fulminate, be productive (was Re: Karl fulminates, film at 11. == thanks) 
Cc: FREEBSD-SECURITY-L <freebsd-security@freebsd.org>
In-reply-to: Your message of "Sat, 08 Feb 1997 12:42:06 EST."
		<Pine.BSF.3.95.970208123826.17362A-100000@alpha.risc.org> 
References: <Pine.BSF.3.95.970208123826.17362A-100000@alpha.risc.org>  
Date: Sat, 08 Feb 1997 14:05:08 -0700
From: Warner Losh <imp@village.org>
Message-Id: <E0vtJxM-0002dm-00@rover.village.org>
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

In message <Pine.BSF.3.95.970208123826.17362A-100000@alpha.risc.org> Brian Tao writes:
: English" and expecting the person to appreciate Shakespeare.  I take
: it there is more to this job than replacing all sprintf's with
: snprintf's?  :)

Yes.  Buffer overflows are only one small problem.  Creative abuse of
features is another, much harder problem to find.

Warner