Re^5: use of print f and sprint f

I'm sorry, but I don't understand what your point could possibly be. The documentation states that the first parameter to printf is expected to be a string with placeholders that begin with % and that you should use %% when you want an explicit %. Your assertion that it should print %%%% does not follow from anything in the documentation. Perhaps I'm missing something so could you please explain yourself a little better?

Comment on Re^5: use of print f and sprint f

Replies are listed 'Best First'.
Re^6: use of print f and sprint f by ikegami (Patriarch) on Nov 10, 2004 at 17:04 UTC
We were talking about using: `printf("$l, $j, %.3f ...\n", $Hx, ...);` rather than `printf("%s, %s, %.3f ...\n", $l, $j, $Hx, ...);` and the question was whether the first one was unsafe. My snippet demonstrated that escapes inside $l do get processed by printf (which to me is obvious) and therefore printf is subject to coersion by the user ("vulnerable") if the first method is used. It's not as vulnerable as C version, but it's still dangerous.	[reply] [d/l] [select]

Replies are listed 'Best First'.

Re^6: use of print f and sprint f
by ikegami (Patriarch) on Nov 10, 2004 at 17:04 UTC

We were talking about using:
printf("$l, $j, %.3f ...\n", $Hx, ...);
rather than
printf("%s, %s, %.3f ...\n", $l, $j, $Hx, ...);
and the question was whether the first one was unsafe.

My snippet demonstrated that escapes inside $l do get processed by printf (which to me is obvious) and therefore printf is subject to coersion by the user ("vulnerable") if the first method is used. It's not as vulnerable as C version, but it's still dangerous.

[reply]
[d/l]
[select]