|
|
|
|
|
by alxmdev
1163 days ago
|
|
Bingo, you should never pass arbitrary strings where they could be used as format specifiers, it's like running arbitrary code. Some compilers even issue warnings when you pass non-literal format strings to the printf family. |
|