From b9cdd10a86966c1ed19ebb0630b78c9581a771d8 Mon Sep 17 00:00:00 2001 From: Timo Sirainen Date: Fri, 19 Oct 2001 11:37:13 +0000 Subject: [PATCH] format string exploit found & patch by cph@cph.demon.co.uk git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1849 dbcabf3a-b0e7-0310-adc4-f8d773084564 --- src/irc/proxy/dump.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/irc/proxy/dump.c b/src/irc/proxy/dump.c index 53c6d3c9..8074ae44 100644 --- a/src/irc/proxy/dump.c +++ b/src/irc/proxy/dump.c @@ -167,7 +167,7 @@ static void dump_join(IRC_CHANNEL_REC *channel, CLIENT_REC *client) if (str->len >= 500) { g_string_append_c(str, '\n'); - proxy_outdata(client, str->str); + proxy_outdata(client, "%s", str->str); create_names_start(str, channel, client); first = TRUE; } @@ -188,7 +188,7 @@ static void dump_join(IRC_CHANNEL_REC *channel, CLIENT_REC *client) g_slist_free(nicks); g_string_append_c(str, '\n'); - proxy_outdata(client, str->str); + proxy_outdata(client, "%s", str->str); g_string_free(str, TRUE); proxy_outdata(client, ":%s 366 %s %s :End of /NAMES list.\n",