diff options
author | russell <russell@f38db490-d61c-443f-a65b-d21fe96a405b> | 2008-03-13 20:26:59 +0000 |
---|---|---|
committer | russell <russell@f38db490-d61c-443f-a65b-d21fe96a405b> | 2008-03-13 20:26:59 +0000 |
commit | 63253036f4f4947e8754d5560283546ee2b000d7 (patch) | |
tree | 469d20dc31e20467d9745f5225bd7b6b287af5c2 /apps/app_followme.c | |
parent | 2afa022e2a2c02eaa4086bb419d57beadb3ab4e5 (diff) |
Merged revisions 108469 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.4
........
r108469 | russell | 2008-03-13 15:26:28 -0500 (Thu, 13 Mar 2008) | 4 lines
Fix a couple uses of sprintf. The second one could actually cause an overflow
of a stack buffer. It's not a security issue though, it only depends on your
configuration.
........
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@108472 f38db490-d61c-443f-a65b-d21fe96a405b
Diffstat (limited to 'apps/app_followme.c')
-rw-r--r-- | apps/app_followme.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/apps/app_followme.c b/apps/app_followme.c index 4e83c819f..eeb9f03dc 100644 --- a/apps/app_followme.c +++ b/apps/app_followme.c @@ -779,9 +779,9 @@ static void findmeexec(struct fm_args *tpargs) } if (!strcmp(tpargs->context, "")) - sprintf(dialarg, "%s", number); + snprintf(dialarg, sizeof(dialarg), "%s", number); else - sprintf(dialarg, "%s@%s", number, tpargs->context); + snprintf(dialarg, sizeof(dialarg), "%s@%s", number, tpargs->context); tmpuser = ast_calloc(1, sizeof(*tmpuser)); if (!tmpuser) { |