diff options
author | Aris Adamantiadis <aris@0xbadc0de.be> | 2009-06-17 23:42:07 +0200 |
---|---|---|
committer | Aris Adamantiadis <aris@0xbadc0de.be> | 2009-06-17 23:42:07 +0200 |
commit | 916958a2bb4be50f8562719119c143ba74fb803c (patch) | |
tree | 5ec7da1018206511af73753ad05ffb4efba0bd64 | |
parent | e2af94289f4aa328af9eddb48826cd6a54637e60 (diff) | |
download | libssh-916958a2bb4be50f8562719119c143ba74fb803c.tar.gz libssh-916958a2bb4be50f8562719119c143ba74fb803c.tar.xz libssh-916958a2bb4be50f8562719119c143ba74fb803c.zip |
Fixed potential format string attacks
Potential format string attacks on error reporting in channels.c
-rw-r--r-- | libssh/channels.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/libssh/channels.c b/libssh/channels.c index 6bf68446..d637ee1c 100644 --- a/libssh/channels.c +++ b/libssh/channels.c @@ -315,7 +315,7 @@ static void channel_rcv_change_window(SSH_SESSION *session) { channel = channel_from_msg(session); if (channel == NULL) { - ssh_log(session, SSH_LOG_FUNCTIONS, ssh_get_error(session)); + ssh_log(session, SSH_LOG_FUNCTIONS, "%s", ssh_get_error(session)); } rc = buffer_get_u32(session->in_buffer, &bytes); @@ -413,7 +413,7 @@ static void channel_rcv_eof(SSH_SESSION *session) { channel = channel_from_msg(session); if (channel == NULL) { - ssh_log(session, SSH_LOG_FUNCTIONS, ssh_get_error(session)); + ssh_log(session, SSH_LOG_FUNCTIONS, "%s", ssh_get_error(session)); leave_function(); return; } @@ -435,7 +435,7 @@ static void channel_rcv_close(SSH_SESSION *session) { channel = channel_from_msg(session); if (channel == NULL) { - ssh_log(session, SSH_LOG_FUNCTIONS, ssh_get_error(session)); + ssh_log(session, SSH_LOG_FUNCTIONS, "%s", ssh_get_error(session)); leave_function(); return; } @@ -477,7 +477,7 @@ static void channel_rcv_request(SSH_SESSION *session) { channel = channel_from_msg(session); if (channel == NULL) { - ssh_log(session, SSH_LOG_FUNCTIONS, ssh_get_error(session)); + ssh_log(session, SSH_LOG_FUNCTIONS,"%s", ssh_get_error(session)); leave_function(); return; } |