Created attachment 159029 [details] syslog.3.patch The syslog function signature looks like this: void syslog(int priority, const char *message, ...); In the BUGS section of syslog(3), the reader is warned about formatting attacks and it is suggested that the following idiom be used: syslog("%s", string); The example lacks the first int argument (the priority). The attached patch adds the missing 'priority' argument to the example code.
A commit references this bug: Author: pluknet Date: Tue Jul 21 09:44:46 UTC 2015 New revision: 285739 URL: https://svnweb.freebsd.org/changeset/base/285739 Log: Add missing priority argument in example code in BUGS section. PR: 201725 Submitted by: Thomas Cort MFC after: 1 week Changes: head/lib/libc/gen/syslog.3
There is a commit referencing this PR, but it's still not closed and has been inactive for some time. Closing the PR as fixed but feel free to re-open it if the issue hasn't been completely resolved. Thanks