You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
return {buf.get(), buf.get() + size - 1}; // We don't want the '\0' inside
}
), snprintf is used where the format string is not a string literal. This is considered as a bad practice (https://fedoraproject.org/wiki/Format-Security-FAQ) and also breaks the build process (#1303) if a more restricted option Werror=format-security is used. If possible, we should find a way to change this.
The text was updated successfully, but these errors were encountered:
mewim
changed the title
Format security for snprintf
Format security for string_format function
Feb 21, 2023
In our
string_format
function (kuzu/src/include/common/utils.h
Lines 52 to 61 in 59e231a
snprintf
is used where the format string is not a string literal. This is considered as a bad practice (https://fedoraproject.org/wiki/Format-Security-FAQ) and also breaks the build process (#1303) if a more restricted optionWerror=format-security
is used. If possible, we should find a way to change this.The text was updated successfully, but these errors were encountered: