From 3718c179b24ed606ab6d7d74698619de454bb103 Mon Sep 17 00:00:00 2001 From: david Date: Tue, 10 Nov 2009 20:48:20 +0000 Subject: [PATCH] Add a comment to the TODO item about localization for Nmap. Need to be careful of security risks from functions that change their behavior depending on the locale. --- docs/TODO | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/TODO b/docs/TODO index a838360d8..056a9d707 100644 --- a/docs/TODO +++ b/docs/TODO @@ -256,7 +256,10 @@ o The Zenmap translation system http://nmap.org/docs.html. We should definitely try to use the same translation methods for Zenmap as we do for Nmap. In fact, maybe we can create a combined PO file Nmap, Zenmap, Ncat, and Ndiff so that - they can all be translated and maintained together. + they can all be translated and maintained together. Something to + consider: calling setlocale can change the behavior of functions like + isalpha. Locale-dependent functions need to be checked for security + risks. o Consider changing Nsock so that it is able to take advantage of more modern interfaces to dealing with large sockets, rather than just