[Freeswitch-svn] [commit] r4253 -	freeswitch/trunk/src/mod/languages/mod_spidermonkey
    Freeswitch SVN 
    mikej at freeswitch.org
       
    Tue Feb 13 22:32:14 EST 2007
    
    
  
Author: mikej
Date: Tue Feb 13 22:32:13 2007
New Revision: 4253
Modified:
   freeswitch/trunk/src/mod/languages/mod_spidermonkey/mod_spidermonkey.c
Log:
potential format string exploit
Modified: freeswitch/trunk/src/mod/languages/mod_spidermonkey/mod_spidermonkey.c
==============================================================================
--- freeswitch/trunk/src/mod/languages/mod_spidermonkey/mod_spidermonkey.c	(original)
+++ freeswitch/trunk/src/mod/languages/mod_spidermonkey/mod_spidermonkey.c	Tue Feb 13 22:32:13 2007
@@ -225,7 +225,7 @@
 
 	if (argc > 0) {
 		char *body = JS_GetStringBytes(JS_ValueToString(cx, argv[0]));
-		switch_event_add_body(eo->event, body);
+		switch_event_add_body(eo->event, "%s", body);
 		*rval = BOOLEAN_TO_JSVAL( JS_TRUE );
 		return JS_TRUE;
 	}
    
    
More information about the Freeswitch-svn
mailing list