mirror of
https://github.com/irssi/irssi.git
synced 2026-08-10 20:33:46 +02:00
format string exploit found & patch by cph@cph.demon.co.uk
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1849 dbcabf3a-b0e7-0310-adc4-f8d773084564
This commit is contained in:
parent
40edf12dca
commit
b9cdd10a86
1 changed files with 2 additions and 2 deletions
|
|
@ -167,7 +167,7 @@ static void dump_join(IRC_CHANNEL_REC *channel, CLIENT_REC *client)
|
|||
|
||||
if (str->len >= 500) {
|
||||
g_string_append_c(str, '\n');
|
||||
proxy_outdata(client, str->str);
|
||||
proxy_outdata(client, "%s", str->str);
|
||||
create_names_start(str, channel, client);
|
||||
first = TRUE;
|
||||
}
|
||||
|
|
@ -188,7 +188,7 @@ static void dump_join(IRC_CHANNEL_REC *channel, CLIENT_REC *client)
|
|||
g_slist_free(nicks);
|
||||
|
||||
g_string_append_c(str, '\n');
|
||||
proxy_outdata(client, str->str);
|
||||
proxy_outdata(client, "%s", str->str);
|
||||
g_string_free(str, TRUE);
|
||||
|
||||
proxy_outdata(client, ":%s 366 %s %s :End of /NAMES list.\n",
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue