[patch] Live journal buffer overflow patch

centericq-4.21.0-livejrnl-buffoverflow-fix.diff (text/plain), 1.07 KB, created by Mike Pagano on 2007-01-19 15:41:49 UTC

--- src/hooks/ljhook.cc.orig	2007-01-19 09:15:24.000000000 -0500
+++ src/hooks/ljhook.cc	2007-01-19 09:40:33.000000000 -0500
@@ -669,7 +669,7 @@
 		if(!foempty) {
 		    bd = (string) "http://" + conf.getourid(proto).server + "/users/" + in->first;
 
-		    sprintf(buf, _("The user %s (%s) has added you to his/her friend list\n\nJournal address: %s"),
+			snprintf(buf, sizeof(buf), _("The user %s (%s) has added you to his/her friend list\n\nJournal address: %s"),
 			in->first.c_str(), in->second.c_str(), bd.c_str());
 
 		    em.store(imnotification(self, buf));
@@ -679,7 +679,7 @@
 	    for(il = friendof.begin(); il != friendof.end(); ) {
 		if(nfriendof.find(*il) == nfriendof.end()) {
 		    bd = (string) "http://" + conf.getourid(proto).server + "/users/" + *il;
-		    sprintf(buf, _("The user %s has removed you from his/her friend list\n\nJournal address: %s"),
+			snprintf(buf, sizeof(buf), _("The user %s has removed you from his/her friend list\n\nJournal address: %s"),
 			il->c_str(), bd.c_str());
 		    em.store(imnotification(self, buf));
 		    friendof.erase(il);