From owner-freebsd-security  Mon May 13  8:53: 6 2002
Delivered-To: freebsd-security@freebsd.org
Received: from ebb.errno.com (ebb.errno.com [66.127.85.87])
	by hub.freebsd.org (Postfix) with ESMTP id D4DF437B401
	for <security@FreeBSD.ORG>; Mon, 13 May 2002 08:53:01 -0700 (PDT)
Received: from ZABU ([131.106.3.56])
	(authenticated bits=0)
	by ebb.errno.com (8.12.1/8.12.1) with ESMTP id g4DFqu4F012613
	(version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO);
	Mon, 13 May 2002 08:52:58 -0700 (PDT)?g
	(envelope-from sam@errno.com)œ
Message-ID: <007201c1fa96$7f8a6820$38036a83@ZABU>
From: "Sam Leffler" <sam@errno.com>
To: "Carroll, D. (Danny)" <Danny.Carroll@mail.ing.nl>,
	"Mitch Collinsworth" <mitch@ccmr.cornell.edu>
Cc: <security@FreeBSD.ORG>
References: <6C506EA550443D44A061432F1E92EA4C6C5156@ing.com>
Subject: Re: DHCPD bug
Date: Mon, 13 May 2002 08:54:35 -0700
Organization: Errno Consulting
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4807.1700
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700
X-DCC-errno-Metrics: ebb.errno.com 1006; Body=3 Fuz1=3 Fuz2=3
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> But my point is, maybe a simple sed or perl script ran over the source
> might yeild other potential problems?

NetBSD used gcc -Wformat <mumble> (or whatever it is) to validate format
strings against the varags parameter lists.

    Sam




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message