Subject: Re: proposal: disable *printf %n specifier in libc in NetBSD 1.5
To: James Chacon <jchacon@genuity.net>
From: Bill Sommerfeld <sommerfeld@orchard.arlington.ma.us>
List: tech-userlevel
Date: 09/13/2000 11:13:17
> This logic makes no sense though in the larger context. Using this idea
> then gets() should have simply been removed as well from the library years
> ago as it's abuse can cause system compromises. 

Yes, it should have.  

						- Bill