openbsd-ports/news/tin/patches/patch-src-save_c
shell b9d1cda69c Add patches for tin-1.4.5
Security Alert

prompt_slk_response() have a formatting string
problem, and 'subject' are controlled by remote,
this may cause some problems.

Patches by Matthieu Herrb <matthieu.herrb@laas.fr>
2001-08-31 10:27:19 +00:00

13 lines
476 B
Plaintext

$OpenBSD: patch-src-save_c,v 1.1 2001/08/31 10:27:19 shell Exp $
--- src/save.c.orig Fri Nov 10 09:43:17 2000
+++ src/save.c Fri Aug 31 18:10:16 2001
@@ -343,7 +343,7 @@
return FALSE;
}
- ch = prompt_slk_response(tinrc.default_save_mode, "aoq\033", txt_append_overwrite_quit, file);
+ ch = prompt_slk_response(tinrc.default_save_mode, "aoq\033", "%s", txt_append_overwrite_quit, file);
switch (ch) {
case iKeySaveAppendFile:
strcpy (mode, "a+");