develooper Front page | perl.perl5.porters | Postings from October 1999

printf is tainted!?

Thread Next
From:
Tom Christiansen
Date:
October 23, 1999 15:53
Subject:
printf is tainted!?
Message ID:
199910232253.QAA08020@jhereg.perl.com
I read this in perlfunc:

   To cope with broken systems that allow the standard locales to
   be overridden by malicious users, the return value may be tainted
   if any of the floating point formats are used and the conversion
   yields something that doesn't look like a normal C-locale floating
   point number.  This happens regardless of whether `use locale' is in
   effect or not.

Let us imagine that this is astonishing but true.  Shouldn't it be
in perlsec?  And shouldn't it be in perldelta?

--tom

-- 
Every absurdity has a champion who will defend it.

Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About