diff options
Diffstat (limited to 'lib/libc/gen/syslog.3')
| -rw-r--r-- | lib/libc/gen/syslog.3 | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/libc/gen/syslog.3 b/lib/libc/gen/syslog.3 index 18dd3cb..6852bc0 100644 --- a/lib/libc/gen/syslog.3 +++ b/lib/libc/gen/syslog.3 @@ -283,7 +283,7 @@ functions appeared in .Sh BUGS Never pass a string with user-supplied data as a format without using .Ql %s . -An attacker can put format specifiers in the string to mangle your stack, +An attacker can put format specifiers in the string to mangle your stack, leading to a possible security hole. This holds true even if the string was built using a function like .Fn snprintf , |
