http://qs1969.pair.com?node_id=580041


in reply to Re: problem with 'strftime' on unix systems
in thread problem with 'strftime' on unix systems

You might to want think carefully before passing user supplied input to the format string of strftime, the POSIX passes this virtually unchanged to the system strftime where there is potential for a 'Format String Vulnerability'.

/J\