[Ulf Lamping <ulf.lamping@xxxxxx>]

ronnie sahlberg wrote:

> Nice work.
>  
:-)

> I think requiring 1.2.3 is fine,   those
> such as myself with older versions are very few and can live with suboptimal
> stability/broken g_snprintf()
>
>
> If you run   
> grep sprintf | sed -e "s/:.*$//" | sort | uniq
> in epan and epan/dissectors
> you get a lot of hits.
>  
Yes, that's the next step.

> Can you update the wiki and add a section that all these files need to
> be audited and fixed up?
>  
I've added:

http://wiki.ethereal.com/Development/InsecureCalls

I've also placed a note, that we might use static code analysis tools 
like flawfinder to find other similar problems.

Regards, ULFL