[Freeswitch-svn] [commit] r4253 - freeswitch/trunk/src/mod/languages/mod_spidermonkey

Freeswitch SVN mikej at freeswitch.org
Tue Feb 13 22:32:14 EST 2007


Author: mikej
Date: Tue Feb 13 22:32:13 2007
New Revision: 4253

Modified:
   freeswitch/trunk/src/mod/languages/mod_spidermonkey/mod_spidermonkey.c

Log:
potential format string exploit

Modified: freeswitch/trunk/src/mod/languages/mod_spidermonkey/mod_spidermonkey.c
==============================================================================
--- freeswitch/trunk/src/mod/languages/mod_spidermonkey/mod_spidermonkey.c	(original)
+++ freeswitch/trunk/src/mod/languages/mod_spidermonkey/mod_spidermonkey.c	Tue Feb 13 22:32:13 2007
@@ -225,7 +225,7 @@
 
 	if (argc > 0) {
 		char *body = JS_GetStringBytes(JS_ValueToString(cx, argv[0]));
-		switch_event_add_body(eo->event, body);
+		switch_event_add_body(eo->event, "%s", body);
 		*rval = BOOLEAN_TO_JSVAL( JS_TRUE );
 		return JS_TRUE;
 	}



More information about the Freeswitch-svn mailing list