Hacker News new | ask | show | jobs
by alxmdev 1163 days ago
Bingo, you should never pass arbitrary strings where they could be used as format specifiers, it's like running arbitrary code. Some compilers even issue warnings when you pass non-literal format strings to the printf family.