21 Jan
2012
21 Jan
'12
12:31 p.m.
// Avoid
naming collisions with KDE4.
char *logname;
logname = prog;
strcat ( logname, "-tde" );
sprintf( buf, "/var/log/%s.log", logname )
sprintf( buf, "/var/log/%s-tde.log", logname );
without the strcat line is better because if you strcat you
could cause
a buffer overflow in logname.
Anyway sprintf is potentially insecure, using snprintf
would probably be
better.