From owner-freebsd-bugs Sat Oct 27 2:50: 7 2001 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id 4631937B401 for ; Sat, 27 Oct 2001 02:50:02 -0700 (PDT) Received: (from gnats@localhost) by freefall.freebsd.org (8.11.4/8.11.4) id f9R9o2A82201; Sat, 27 Oct 2001 02:50:02 -0700 (PDT) (envelope-from gnats) Date: Sat, 27 Oct 2001 02:50:02 -0700 (PDT) Message-Id: <200110270950.f9R9o2A82201@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org Cc: From: Bruce Evans Subject: Re: bin/31483: minor correction in error message printed by acpiconf.8 Reply-To: Bruce Evans Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org The following reply was made to PR bin/31483; it has been noted by GNATS. From: Bruce Evans To: Mitsuru IWASAKI Cc: Subject: Re: bin/31483: minor correction in error message printed by acpiconf.8 Date: Sat, 27 Oct 2001 19:40:34 +1000 (EST) On Thu, 25 Oct 2001, Mitsuru IWASAKI wrote: > To: cjclark@alum.mit.edu, cristjc@earthlink.net > > ACPIDEV is a #define'd constant string. It is not a security > > vulnerability to use it as the original poster did. The original > > poster's code is, > > > > err(1, "/dev/acpi"); > > > > By the time the compiler gets to it. No format string vulnerability. > > > > Anyway, here is a general err.h and sysexits.h cleanup of the program > > that I'll commit if msmith and iwasaki don't mind, > > Thanks taking care of this, I don't mind so please commit :-) Use non-cryptic error messages, not sysexits.h. sysexits.h is only understood by a a couple of programs (mainly sendmail). Bruce To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message