开放源代码软件Apache 成熟度评估报告 - 开源中国社区- 软件镜像下载

Line:251[17] sprintf(buf2, "%s.%010d", szLogRoot,tLogStart);File: httpd-2.2.15//modules/dav/main/util_lock.c Line:120[9]sprintf(tmp, "%s" DEBUG_CR,File: httpd-2.2.15//modules/dav/fs/repos.c Line:302[5]sprintf(buf,File: httpd-2.2.15//modules/dav/fs/repos.c Line:1868[16](void) sprintf(buf, "%" APR_OFF_T_FMT, resource->info->finfo.size);Severity: HighIssue: printfCheck to be sure that the non-constant format string passed as argument 1to this function call does not come from an untrusted source that couldhave added formatting characters that the code is not prepared to handle.File: httpd-2.2.15//test/time-sem.c Line:148[5] printf("opening " FNAME "in current directory\n"); File: httpd-2.2.15//srclib/apr/test/sendfile.cLine:292[9] printf("bytes really sent: %" APR_SIZE_T_FMT "\n", File:httpd-2.2.15//srclib/apr/test/sockperf.c Line:234[13] printf("%6"APR_TIME_T_FMT, results[i].msecs[j]); File: httpd-2.2.15//srclib/apr/test/sockperf.c Line:238[9] printf("\t Average: %6"APR_TIME_T_FMT "\n",File: httpd-2.2.15//srclib/apr/test/testlockperf.c Line:121[5]printf("microseconds: %" APR_INT64_T_FMT " usec\n",File: httpd-2.2.15//srclib/apr/test/testlockperf.c Line:169[5]printf("microseconds: %" APR_INT64_T_FMT " usec\n",File: httpd-2.2.15//srclib/apr/test/testlockperf.c Line:217[5]printf("microseconds: %" APR_INT64_T_FMT " usec\n", File:httpd-2.2.15//srclib/apr/build/jlibtool.c Line:564[9]printf("Version " VERSION "\n");File: httpd-2.2.15//support/htpasswd.c Line:531[13] printf("%s" NL,record);File: httpd-2.2.15//support/win32/wintty.c Line:142[21] printf(options,arg0);File: httpd-2.2.15//support/ab.c Line:758[5]printf("Document Length: %" APR_SIZE_T_FMT " bytes\n", doclen); File:httpd-2.2.15//support/ab.c Line:772[5] printf("Total transferred: %"APR_INT64_T_FMT " bytes\n", totalread);14