diff options
| author | kris <kris@FreeBSD.org> | 2000-09-10 12:38:52 +0800 |
|---|---|---|
| committer | kris <kris@FreeBSD.org> | 2000-09-10 12:38:52 +0800 |
| commit | d463490d99ca1722f4e16fe1d62987cab10bfc23 (patch) | |
| tree | 827991294794f6e48f8a8db3e869f4db18dbd68a /irc/muh | |
| parent | 0c923889122aebc4000be8e1d51b73b0b59250a3 (diff) | |
| download | freebsd-ports-gnome-d463490d99ca1722f4e16fe1d62987cab10bfc23.tar.gz freebsd-ports-gnome-d463490d99ca1722f4e16fe1d62987cab10bfc23.tar.zst freebsd-ports-gnome-d463490d99ca1722f4e16fe1d62987cab10bfc23.zip | |
Fix format string vulnerabilities.
Submitted by: Maxime Henrion <mux@QUALYS.COM>
Diffstat (limited to 'irc/muh')
| -rw-r--r-- | irc/muh/files/patch-aa | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/irc/muh/files/patch-aa b/irc/muh/files/patch-aa new file mode 100644 index 000000000000..234ea1f41b32 --- /dev/null +++ b/irc/muh/files/patch-aa @@ -0,0 +1,29 @@ +--- src/muh.c.orig Sun Mar 19 04:08:27 2000 ++++ src/muh.c Sat Sep 9 21:32:15 2000 +@@ -575,7 +575,7 @@ + if( strcmp( param2 + 2, "USERINFO\1" ) == 0 ) + irc_notice( &c_server, nick, USERINFOREPLY ); + if( strncmp( param2 + 2, "PING", 4 ) == 0 ) { +- if( strlen( param2 + 1 ) > 6 ) irc_notice( &c_server, nick, param2 + 1 ); ++ if( strlen( param2 + 1 ) > 6 ) irc_notice( &c_server, nick, "%s", param2 + 1 ); + } + if( strcmp( param2 + 2, "CLIENTINFO\1" ) == 0 ) + irc_notice( &c_server, nick, CLIENTINFOREPLY ); +@@ -591,7 +591,7 @@ + } + else { /* normale message/notice */ + if( !is_ignore( hostname, IGNORE_MESSAGE ) && status.allowreply ) { +- if( cfg.awaynotice ) irc_notice( &c_server, nick, cfg.awaynotice ); ++ if( cfg.awaynotice ) irc_notice( &c_server, nick, "%s", cfg.awaynotice ); + add_ignore( hostname, 120, IGNORE_MESSAGE ); + status.allowreply = 0; + timers.reply = 0; +@@ -841,7 +841,7 @@ + s = ( char * )malloc( 1024 ); + while( fgets( s, 1023, messagelog ) ) { + if( s[ strlen( s ) - 1 ] == '\n' ) s[ strlen( s ) - 1 ] = 0; +- irc_notice( &c_client, status.nickname, s ); ++ irc_notice( &c_client, status.nickname, "%s", s ); + } + FREESTRING( s ); + |