CVS commit: src

["Christos Zoulas" <christos%netbsd.org@localhost>]

Module Name:    src
Committed By:   christos
Date:           Wed Apr  8 14:12:06 UTC 2026

Modified Files:
        src/include: resolv.h
        src/lib/libc/include: port_after.h
        src/lib/libc/inet: inet_cidr_ntop.c inet_net_ntop.c
        src/lib/libc/nameser: ns_name.c ns_print.c ns_ttl.c
        src/lib/libc/resolv: res_debug.c res_init.c

Log Message:
Fix https://sourceware.org/bugzilla/show_bug.cgi?id=34033

- Deprecate loc_ntoa because it does not specify the size of the destination
  buffer and replace it with loc_ntoa1
- Replace sprintf(3) with snprintf(3), checking for string overflow.

This removes all sprintf(3) uses in libc, except in compat/net/compat_ns_ntoa.c

Thanks to phone@ for reviewing and Florian Weimer for notifying us.


To generate a diff of this commit:
cvs rdiff -u -r1.42 -r1.43 src/include/resolv.h
cvs rdiff -u -r1.1 -r1.2 src/lib/libc/include/port_after.h
cvs rdiff -u -r1.8 -r1.9 src/lib/libc/inet/inet_cidr_ntop.c
cvs rdiff -u -r1.4 -r1.5 src/lib/libc/inet/inet_net_ntop.c
cvs rdiff -u -r1.15 -r1.16 src/lib/libc/nameser/ns_name.c
cvs rdiff -u -r1.12 -r1.13 src/lib/libc/nameser/ns_print.c
cvs rdiff -u -r1.8 -r1.9 src/lib/libc/nameser/ns_ttl.c
cvs rdiff -u -r1.19 -r1.20 src/lib/libc/resolv/res_debug.c
cvs rdiff -u -r1.32 -r1.33 src/lib/libc/resolv/res_init.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.