[or-cvs] backport from pre3:

Roger Dingledine arma at seul.org
Wed Oct 13 21:58:29 UTC 2004


Update of /home2/or/cvsroot/src/or
In directory moria.mit.edu:/home2/arma/work/onion/0081/src/or

Modified Files:
      Tag: tor-0_0_8-patches
	rephist.c 
Log Message:
backport from pre3:
fix a string format vulnerability
(probably not exploitable)


Index: rephist.c
===================================================================
RCS file: /home2/or/cvsroot/src/or/rephist.c,v
retrieving revision 1.28
retrieving revision 1.28.2.1
diff -u -d -r1.28 -r1.28.2.1
--- rephist.c	18 Aug 2004 09:57:50 -0000	1.28
+++ rephist.c	13 Oct 2004 21:58:24 -0000	1.28.2.1
@@ -287,7 +287,7 @@
           break;
         }
       }
-      log(severity, buffer);
+      log(severity, "%s", buffer);
     }
   }
 }



More information about the tor-commits mailing list