projects / oweals / cde.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4ac42dd) | patch
dtaction: Fix unsafe use of sprintf
authorJon Trulson <jon@radscan.com>
Thu, 9 Aug 2012 02:17:17 +0000 (20:17 -0600)
committerJon Trulson <jon@radscan.com>
Thu, 9 Aug 2012 02:17:17 +0000 (20:17 -0600)
commit70e1c5a55ad84d7d3de004fdf7d49835b4fe6a43
treef1a0e05caa5921596241ba1f55b25dc201d09107tree | snapshot
parent4ac42dd84f85070425df7eb70153034fa3f9d053commit | diff
dtaction: Fix unsafe use of sprintf

Patch from Robert Tomsick <robert+cde@tomsick.net>:

I believe this fixes vulnerability #3 from CERT CA-1999-11.[1]  The other
uses of sprintf in DtAction seem to be safe.

[1] https://www.cert.org/advisories/CA-1999-11.html
cde/programs/dtaction/Main.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.