mirror of
https://github.com/weechat/weechat.git
synced 2026-06-30 06:46:38 +02:00
Fixed infobar_printf interface function, security problem with string format
This commit is contained in:
@@ -330,7 +330,7 @@ weechat_ruby_print_infobar (VALUE class, VALUE delay, VALUE message)
|
||||
c_delay = FIX2INT (delay);
|
||||
c_message = STR2CSTR (message);
|
||||
|
||||
ruby_plugin->infobar_printf (ruby_plugin, c_delay, c_message);
|
||||
ruby_plugin->infobar_printf (ruby_plugin, c_delay, "%s", c_message);
|
||||
|
||||
return INT2FIX (1);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user