From 7d0b69b94b8fa3031f625229c8dcb453b601da97 Mon Sep 17 00:00:00 2001 From: cyberbotx Date: Sun, 15 Mar 2009 23:05:34 +0000 Subject: Correct a set of potential security holes in varags usage in ns_sendpass, patch from Phenoix. git-svn-id: http://anope.svn.sourceforge.net/svnroot/anope/trunk@2169 5417fbe8-f217-4b02-8779-1006273d7864 --- src/core/ns_sendpass.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'src/core') diff --git a/src/core/ns_sendpass.c b/src/core/ns_sendpass.c index 503141b61..f6f37c02f 100644 --- a/src/core/ns_sendpass.c +++ b/src/core/ns_sendpass.c @@ -48,15 +48,15 @@ class CommandNSSendPass : public Command if (!mail) return MOD_CONT; - fprintf(mail->pipe, getstring(na, NICK_SENDPASS_HEAD)); + fprintf(mail->pipe, "%s", getstring(na, NICK_SENDPASS_HEAD)); fprintf(mail->pipe, "\n\n"); fprintf(mail->pipe, getstring(na, NICK_SENDPASS_LINE_1), na->nick); fprintf(mail->pipe, "\n\n"); fprintf(mail->pipe, getstring(na, NICK_SENDPASS_LINE_2), tmp_pass); fprintf(mail->pipe, "\n\n"); - fprintf(mail->pipe, getstring(na, NICK_SENDPASS_LINE_3)); + fprintf(mail->pipe, "%s", getstring(na, NICK_SENDPASS_LINE_3)); fprintf(mail->pipe, "\n\n"); - fprintf(mail->pipe, getstring(na, NICK_SENDPASS_LINE_4)); + fprintf(mail->pipe, "%s", getstring(na, NICK_SENDPASS_LINE_4)); fprintf(mail->pipe, "\n\n"); fprintf(mail->pipe, getstring(na, NICK_SENDPASS_LINE_5), NetworkName); fprintf(mail->pipe, "\n.\n"); -- cgit