Changeset 5cfa9d1c925806f33bd5aee8c15811c31327ef04

Show
Ignore:
Timestamp:
07/06/07 19:34:15 (1 year ago)
Author:
Rémi Denis-Courmont <rem@videolan.org>
git-committer:
Rémi Denis-Courmont <rem@videolan.org> 1181237655 +0000
git-parent:

[f2567856feae9ab57f38a51399650e9ab9a47e61]

git-author:
Rémi Denis-Courmont <rem@videolan.org> 1181237655 +0000
Message:

Fix remote format string injection in SDP parser.
(Sometimes there are good things about NOT being on MBONE)

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • modules/services_discovery/sap.c

    rd2d2d6a r5cfa9d1  
    813813    if( psz_value != NULL ) 
    814814    { 
    815         input_ItemAddInfo( p_input, _("Session"),_("Tool"), psz_value ); 
     815        input_ItemAddInfo( p_input, _("Session"), _("Tool"), "%s", 
     816                           psz_value ); 
    816817    } 
    817818    if( strcmp( p_sdp->username, "-" ) ) 
    818819    { 
    819         input_ItemAddInfo( p_input, _("Session"), 
    820                                 _("User"), p_sdp->username ); 
     820        input_ItemAddInfo( p_input, _("Session"), _("User"), "%s", 
     821                           p_sdp->username ); 
    821822    } 
    822823