mirror of
https://github.com/asterisk/asterisk.git
synced 2025-09-04 20:04:50 +00:00
Fix a couple uses of sprintf. The second one could actually cause an overflow
of a stack buffer. It's not a security issue though, it only depends on your configuration. git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.4@108469 65c4cc65-6c06-0410-ace0-fbb531ad65f3
This commit is contained in:
@@ -818,9 +818,9 @@ static void findmeexec(struct fm_args *tpargs)
|
||||
}
|
||||
|
||||
if (!strcmp(tpargs->context, ""))
|
||||
sprintf(dialarg, "%s", number);
|
||||
snprintf(dialarg, sizeof(dialarg), "%s", number);
|
||||
else
|
||||
sprintf(dialarg, "%s@%s", number, tpargs->context);
|
||||
snprintf(dialarg, sizeof(dialarg), "%s@%s", number, tpargs->context);
|
||||
|
||||
tmpuser = ast_calloc(1, sizeof(*tmpuser));
|
||||
if (!tmpuser) {
|
||||
|
Reference in New Issue
Block a user