From 8e34b3a8024c028dd9fd21d70525fc6d215efde5 Mon Sep 17 00:00:00 2001 From: Mark Adler Date: Fri, 9 Sep 2011 23:22:10 -0700 Subject: zlib 1.2.0.2 --- FAQ | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'FAQ') diff --git a/FAQ b/FAQ index 2a8247c..b439bd9 100644 --- a/FAQ +++ b/FAQ @@ -228,7 +228,8 @@ The lastest zlib FAQ is at http://www.gzip.org/zlib/zlib_faq.html hand, if zlib is compiled to use snprintf() or vsnprintf(), which should normally be the case, then there is no vulnerability. The ./configure script will display warnings if an insecure variation of sprintf() will - be used by gzprintf(). + be used by gzprintf(). Also the zlibCompileFlags() functions will return + information on what variant of sprintf() is used by gzprintf(). If you don't have snprintf() or vsnprintf() and would like one, you can find a portable implementation here: -- cgit v1.2.3-55-g6feb