mirror of
https://github.com/irssi/irssi.git
synced 2025-02-02 15:08:01 -05:00
format string exploit found & patch by cph@cph.demon.co.uk
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1849 dbcabf3a-b0e7-0310-adc4-f8d773084564
This commit is contained in:
parent
40edf12dca
commit
b9cdd10a86
@ -167,7 +167,7 @@ static void dump_join(IRC_CHANNEL_REC *channel, CLIENT_REC *client)
|
||||
|
||||
if (str->len >= 500) {
|
||||
g_string_append_c(str, '\n');
|
||||
proxy_outdata(client, str->str);
|
||||
proxy_outdata(client, "%s", str->str);
|
||||
create_names_start(str, channel, client);
|
||||
first = TRUE;
|
||||
}
|
||||
@ -188,7 +188,7 @@ static void dump_join(IRC_CHANNEL_REC *channel, CLIENT_REC *client)
|
||||
g_slist_free(nicks);
|
||||
|
||||
g_string_append_c(str, '\n');
|
||||
proxy_outdata(client, str->str);
|
||||
proxy_outdata(client, "%s", str->str);
|
||||
g_string_free(str, TRUE);
|
||||
|
||||
proxy_outdata(client, ":%s 366 %s %s :End of /NAMES list.\n",
|
||||
|
Loading…
x
Reference in New Issue
Block a user