From 8cc5b194d4adbe5e231ddf717cef5810fcc5a88b Mon Sep 17 00:00:00 2001 From: cyberbotx Date: Sun, 15 Mar 2009 23:05:23 +0000 Subject: [PATCH] Correct a set of potential security holes in varags usage in ns_register, patch from Phenoix. git-svn-id: http://anope.svn.sourceforge.net/svnroot/anope/trunk@2168 5417fbe8-f217-4b02-8779-1006273d7864 --- src/core/ns_register.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/core/ns_register.c b/src/core/ns_register.c index a899ca760..dc59caecb 100644 --- a/src/core/ns_register.c +++ b/src/core/ns_register.c @@ -499,15 +499,15 @@ int do_sendregmail(User *u, NickRequest *nr) mail = MailRegBegin(u, nr, buf, s_NickServ); if (!mail) return -1; - fprintf(mail->pipe, getstring(NICK_REG_MAIL_HEAD)); + fprintf(mail->pipe, "%s", getstring(NICK_REG_MAIL_HEAD)); fprintf(mail->pipe, "\n\n"); fprintf(mail->pipe, getstring(NICK_REG_MAIL_LINE_1), nr->nick); fprintf(mail->pipe, "\n\n"); fprintf(mail->pipe, getstring(NICK_REG_MAIL_LINE_2), s_NickServ, nr->passcode); fprintf(mail->pipe, "\n\n"); - fprintf(mail->pipe, getstring(NICK_REG_MAIL_LINE_3)); + fprintf(mail->pipe, "%s", getstring(NICK_REG_MAIL_LINE_3)); fprintf(mail->pipe, "\n\n"); - fprintf(mail->pipe, getstring(NICK_REG_MAIL_LINE_4)); + fprintf(mail->pipe, "%s", getstring(NICK_REG_MAIL_LINE_4)); fprintf(mail->pipe, "\n\n"); fprintf(mail->pipe, getstring(NICK_REG_MAIL_LINE_5), NetworkName); fprintf(mail->pipe, "\n.\n");