Comment 4 for bug 205037

Revision history for this message
Ralf Schulze (ralf-schulze) wrote : Re: policykit or policykit-gome do not work with passwords containing "%" character

O.K. It really seems to be an interference with sprintf's conversion specifiers. 'foo%bar" is working because there is no '%b' specifier. 'foo%xbar', foo%ebar', 'foo%fbar', etc. are not working, because these are conversion specifiers.

This means it is almost certainly exploitable somehow.