potential format string exploits (warning: format not a string literal and no format arguments)

git-svn-id: http://svn.freeswitch.org/svn/freeswitch/trunk@4254 d0543943-73ff-0310-b7d9-9358b9ac24b2
This commit is contained in:
Michael Jerris committed 2007-02-14 03:45:10 +00:00
1 parent 711c59a6e0
commit 11a8218db0
5 files changed
+8 -8

No files matched your search

@@ -550,7 +550,7 @@ static void *SWITCH_THREAD_FUNC api_exec(switch_thread_t *thread, void *obj)
if (switch_event_create(&event, SWITCH_EVENT_BACKGROUND_JOB) == SWITCH_STATUS_SUCCESS) {
switch_event_add_header(event, SWITCH_STACK_BOTTOM, "Job-UUID", "%s", acs->uuid_str);
switch_event_add_body(event, reply);
switch_event_add_body(event, "%s", reply);
switch_event_fire(&event);
}
} else {
@@ -650,7 +650,7 @@ static switch_status_t parse_command(listener_t *listener, switch_event_t *event
}
}
snprintf(reply, reply_len, val);
snprintf(reply, reply_len, "%s", val);
goto done;
} else if (!strncasecmp(cmd, "myevents", 8)) {
listener->event_list[SWITCH_EVENT_CHANNEL_CREATE] = 1;