• @riodoro1
    link
    751 month ago

    John\0Doe will fuck with all C (and C based derivatives) software that touches it.

    • pelya
      link
      711 month ago

      Nah, it will end up simply as “John” in the database. You need “John%sDoe” to crash C software with unsafe printf() calls, and even then it’s better to use several “%s”

      • @AnUnusualRelic
        link
        171 month ago

        Which rarely, if ever, happens. Especially with US software.

    • @perviouslyiner
      link
      81 month ago

      With an address in 's-Hertogenbosch to help people who are lazy about escaping.