X-Git-Url: https://git.tld-linux.org/?p=packages%2Fxrdp.git;a=blobdiff_plain;f=format-security.patch;fp=format-security.patch;h=0000000000000000000000000000000000000000;hp=5dea14773ad296dc601e144ab579ad4fe1a1b68e;hb=bf524922b592ede951bacfb56ea09c3dca93b462;hpb=8c34e42728f06a58d10aa579028e27d6f5f7ea75 diff --git a/format-security.patch b/format-security.patch deleted file mode 100644 index 5dea147..0000000 --- a/format-security.patch +++ /dev/null @@ -1,22 +0,0 @@ -Fix a potential security problem if the message log contained "%". - -diff --git a/common/log.c b/common/log.c -index 7bbdfc0..4ed2adf 100644 ---- a/common/log.c -+++ b/common/log.c -@@ -160,13 +160,13 @@ log_message(struct log_config* l_cfg, const unsigned int lvl, const char* msg, . - if (l_cfg->enable_syslog && (lvl <= l_cfg->log_level)) - { - /* log to syslog */ -- syslog(log_xrdp2syslog(lvl), buff + 20); -+ syslog(log_xrdp2syslog(lvl), "%s", buff + 20); - } - - if (lvl <= l_cfg->log_level) - { - /* log to console */ -- g_printf((char*)buff); -+ g_printf("%s", (char*)buff); - - /* log to application logfile */ - #ifdef LOG_ENABLE_THREAD