Re: Security issues in printf() and family

--===============2927522541542046664==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="OrTI+WDfaybdfFa+"
Content-Disposition: inline


--OrTI+WDfaybdfFa+
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Feb 20, 2026 at 06:39:01AM +0100, Martin =C5=98eh=C3=A1k via Gimp-p=
rint-devel wrote:
> while building gutenprint-5.3.6-2026-02-16T02-19 I am getting security
> related build warnings and errors. Output and patch to resolve the issues
> attached.

I honestly don't see the point in merging this as opposed to simply=20
disabling -Wformat-security.  Even if this patch is applied, there are=20
numerous remaining printf format specifiers that remain embedded inside=20
translatable strings that can be trivially overridden at runtime by=20
direct manipulation of the .po[t] files.

Perhaps I lack sufficient imagination, but the way I see it, the worst=20
that can come from manipulating format-specifier-containing translation=20
strings is a pointer dereference-triggered crash.  There is no=20
meaningful danger of data exfiltration as you will (a) need superuser=20
rights to alter the .po[t] files, (b) need superuser rights to turn on=20
enhanced logging that would make any of these printf()s visible, (c)=20
need superuser rights to access said logs, and (d) at best return=20
information about the specific print job that (e) can be obtained via=20
far simpler means (ie just directly exfiltrate the CUPS job control and=20
data files) if you already have level of access necessary to perform=20
steps a-c.

 - Solomon
--=20
Solomon Peachy			      pizza at shaftnet dot org (email&xmpp)
                                      @pizza:shaftnet dot org   (matrix)
Dowling Park, FL                      speachy (libera.chat)


--OrTI+WDfaybdfFa+
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----
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=7lbQ
-----END PGP SIGNATURE-----

--OrTI+WDfaybdfFa+--


--===============2927522541542046664==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============2927522541542046664==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Gimp-print-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/gimp-print-devel

--===============2927522541542046664==--