aniani/profanity
1
0
Fork 0
mirror of https://github.com/profanity-im/profanity.git synced 2024-06-23 21:45:30 +00:00
Code

fix yet another potential leak

Browse Source
This commit is contained in:
Will Song 2015-01-14 11:10:14 -06:00
parent b5d4a52dfa
commit dc43cc602c
No known key found for this signature in database
GPG Key ID: AF0CA153EA5D9C7C
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/command/commands.c
View File

@ -138,6 +138,7 @@ cmd_connect(gchar **args, struct cmd_help_t help)
// Evaluate as shell command to retrieve password
GString *cmd = g_string_append(g_string_new(account->eval_password), " 2>/dev/null");
FILE *stream = popen(cmd->str, "r");
g_string_free(cmd, TRUE);
if(stream){
// Limit to READ_BUF_SIZE bytes to prevent overflows in the case of a poorly chosen command
account->password = g_malloc(READ_BUF_SIZE);
@ -158,7 +159,6 @@ cmd_connect(gchar **args, struct cmd_help_t help)
cons_show("Error evaluating password, see logs for details.");
return TRUE;
}
g_string_free(cmd, TRUE);
} else if (!account->password) {
account->password = ui_ask_password();
}