Re: [xml] reproducible coredump libxml2-2.3.8, trio or libxml or both

In summary, the use of vsnprintf in xmlGetVarStr is "too creative".
Making a workaround in trio does not help on the platforms where
trio_vsnprintf is not used.

And what does C89 say? I wouldn't assume that a system needing
trio_vsnprintf has a C99-compliant compiler.

But that's exactly the point. The trio should only be used in "sub-
standard" compilers. With a compiler conforming to C99 (in this area), 
you won't pull in trio. So, even if there is a difference between C89 and 
C99 in this aspect, the right thing for trio to do, is following the C99 

Peter Jacobi

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]