pegasus/weechat
1
0
Fork 0
mirror of https://github.com/weechat/weechat.git synced 2026-07-06 09:43:13 +02:00
Code Activity

core: fix possible buffer overflow in command /color alias (issue #2330)

Browse Source 
Fix: c.lang.security.insecure-use-strcat-fn.insecure-use-strcat-fn security vulnerability

Automated security fix generated by OrbisAI Security
This commit is contained in:
orbisai0security
2026-06-28 16:15:14 +00:00
committed by Sébastien Helleu
parent 031bc877cb
commit aa77bff164
2 changed files with 7 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/core/core-command.c
+6 -11
View File
@@ -1700,17 +1700,12 @@ COMMAND_CALLBACK(color)
else
str_alias = argv[i];
}
str_color[0] = '\0';
if (str_alias)
{
strcat (str_color, ";");
strcat (str_color, str_alias);
}
if (str_rgb)
{
strcat (str_color, ";");
strcat (str_color, str_rgb);
}
snprintf (str_color, sizeof (str_color),
"%s%s%s%s",
(str_alias) ? ";" : "",
(str_alias) ? str_alias : "",
(str_rgb) ? ";" : "",
(str_rgb) ? str_rgb : "");
/* add color alias */
snprintf (str_command, sizeof (str_command),