Printing thread-safety & overflow issues
Brought to you by:
sfbrent
there are many potential buffer overflows in this
program, in almost every function that takes
input. while those do not really matter, since its
for a "workstation" and not set*id anything.
there is the way it attempts to print data(locally
via lpr/etc):
...
strcat(print_command, " /tmp/gwcc_out.txt");
if (system(print_command) == -1) {
...
which gets directed to that (static) file, with no
checking. meaning any user could forge(link) that
filename and make it redirect the input elsewhere
-- potentially compromising other users.
other than that, pretty gtk gui, looks nice with
my theme :)
--
vade79 -> v9@fakehalo.deadpig.org ->
fakehalo.deadpig.org.