On Sun, Feb 02, 2020 at 04:45:53PM -0700, Theo de Raadt wrote: Hello Theo,
>> When I passed that to openlog, and later called syslog, well, I was >> confused. I then distilled the example down to C. The Debian & GNU man >> pages suggest that I'm not the first person to try doing this. > That would only be true if you've looked at the history of how that text > ended up in their pages, as it is, I think either way overspecifies it, I > think openlog() could plausibly be coded to cache a copy of the whole > string. The standard may have left this open-ended intentionally. Is there > a historian watching this thread? I wasn't able to find anything out when I looked into this a bit, but I'm not a Posix or GNU historian, so I might have missed something obvious. The good news is that the altered text I'm suggesting would still guarantee identical observed behaviour should a given syslog implementation choose to copy 'ident' into a buffer. Laurie
