From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mail-pg0-f68.google.com ([74.125.83.68]) by ur; Wed Mar 22 13:08:36 EDT 2017
Received: by mail-pg0-f68.google.com with SMTP id g2so31575532pge.2
        for <9front@9front.org>; Wed, 22 Mar 2017 10:08:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=message-id:date:from:to:subject:in-reply-to:mime-version
         :content-transfer-encoding;
        bh=r4i+WaK63KMFR/mX65GKXl2YaViPcEossKY1So8+9w4=;
        b=XCvygyPQ5GQDYwiRiIWYz/HtnWRaQ1tpyZcdLZfLwA1yABMj+OU8P+uMobpP+AanUK
         JcVXOxdveTFzF4CWb8lNnmyMnOUsKNjIHW8jF6+rS1Q9pFq6O5Pj7/agXgB4RiqcYCWv
         vq2CT0FtBWhBXDF2/ysz94EtLPiX72w6zK0OMYe9lFZ3zPjUqMnU+aLfoQOJb9gEnqk1
         3w9w4zUdES4ncA6GOTw4eIQqnETCIMjHLG5tXAPlOwPAmE99A/G1nnm/XUINUFKE3Hi0
         xhUIeh2VvPAZQpIsqtVvqesW/vG6uG1eyMiODgIVgnSaJBHD1rkjwwJeyPF/EpX/1AZa
         z/2A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:message-id:date:from:to:subject:in-reply-to
         :mime-version:content-transfer-encoding;
        bh=r4i+WaK63KMFR/mX65GKXl2YaViPcEossKY1So8+9w4=;
        b=XLgbQ+rEEqTgp7DO+ESlWrkL4o9YbeenVdwvS2gFIKWm/2Tc2gl7pXVDbR//HJ0aiS
         4bFnVRt42aIpH0I5ncOEA0hqHPKky1n/InGVbq0AlgaTVoaYO4deWtTtVBQvw24yn3oV
         9FlvICxe+uiRr333qfz6vvW1RBbweMvB15TgMBaZVqXHmPRNtSpUisb6qt4IgYsR7RiP
         DApsCr+g/5wUD0I4yLY87AYo1g9Y0g2Ws0GKSw40E3jj9ucRQhn3Fndv81WZrHS7NneR
         nwYgellfjCINdpz6PCN9161ajNi/edpyySDXPWTrIZyuWzl44GXaXJdUb0+bx9qbPYsv
         u47Q==
X-Gm-Message-State: AFeK/H1yRt2/b2Sza7dPttsGTRK52N1oLxerk7CLxFaoI3HniQbckLForJwUKSIHw7yoLg==
X-Received: by 10.99.231.83 with SMTP id j19mr44566442pgk.50.1490202512754;
        Wed, 22 Mar 2017 10:08:32 -0700 (PDT)
Return-Path: <inkswinc@gmail.com>
Received: from cirno.sam-d.org ([216.129.126.126])
        by smtp.gmail.com with ESMTPSA id f3sm5143541pga.34.2017.03.22.10.08.31
        (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);
        Wed, 22 Mar 2017 10:08:31 -0700 (PDT)
Message-ID: <e3a731ad1bfdf50ec45becc6c80acd85@cirno.sam-d.org>
Date: Wed, 22 Mar 2017 17:10:54 +0000
From: inkswinc@gmail.com
To: cinap_lenrek@felloff.net, 9front@9front.org
Subject: Re: [9front] nupas auth: incompatibility and error messaging
In-Reply-To: 744dfa9c54bf8193702470c2385fe6d9@felloff.net
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: private advanced strategy-scale ACPI polling element-based cloud-oriented just-in-time-based controller 

On Wed, 22 Mar 2017 10:17:14 +0100, cinap_lenrek@felloff.net wrote:
> to be clear, this is like:
> 
> buf = ... usercontrolled string ...
> 
> print(buf); vs print("%s", buf);
> 
> the former allows you to crash the program.
> 
> --
> cinap

Ah, thanks. I'd always seen the latter style, but it never clicked
for me why it was done that way. Makes a lot of sense now... time
to grep through my programs and see all the other places I've made
this mistake.

- sam-d