Re: Fwd: fix format security

Simon Josefsson wrote:
> >> But that seems a bit fragile.
> >
> > Please come up with an attack that is not defended against.
> 
> My argument was about complexity -- sometimes it is worth defending
> against an entire class of attack that is theoretical if the price for
> the defence is low.
> 
> Anything involving searching file paths, environment variables and
> reading files that could be malicious -- and glibc 1998-era code :) --
> may be concerns.

Sure, there's a compromise to make between features and complexity.

Some distros (like OpenBSD, IIRC) build all their packages with --disable-nls.
This reduces the complexity. But, of course, such a distro cannot be
recommended to an average user who may not master English.

Bruno