Implementing a web server in a single printf() call (2014)

OpenBSD has removed the format specifier that makes this possible, for hopefully obvious reasons.

Was the thought process: "Anything involving C string handling is fundamentally security hostile, lets fix it by breaking %n!"

	▲	trashb an hour ago \| parent [-]
		Can you elaborate on the statement "Anything involving C string handling is fundamentally security hostile"?

gnabgib 4 days ago | parent | prev [-]

Discussion at the time (181 points, 39 comments) https://news.ycombinator.com/item?id=7389623