diff options
| author | cvs2svn <cvs2svn@FreeBSD.org> | 2005-10-16 07:41:55 +0000 |
|---|---|---|
| committer | cvs2svn <cvs2svn@FreeBSD.org> | 2005-10-16 07:41:55 +0000 |
| commit | 40a3261d1a6e2617f6afde0cd6d762a7e211af7a (patch) | |
| tree | d70bbf882801af3a4e58dde3ed6a1da1849479d4 /games/urban/files/patch-src::meny::meny.cc | |
| parent | Fix the string format vulnerability desribed at (diff) | |
This commit was manufactured by cvs2svn to create tag 'RELEASE_6_0_0'.release/6.0.0
Diffstat (limited to 'games/urban/files/patch-src::meny::meny.cc')
| -rw-r--r-- | games/urban/files/patch-src::meny::meny.cc | 26 |
1 files changed, 24 insertions, 2 deletions
diff --git a/games/urban/files/patch-src::meny::meny.cc b/games/urban/files/patch-src::meny::meny.cc index 64f5627258de..86312c88e39f 100644 --- a/games/urban/files/patch-src::meny::meny.cc +++ b/games/urban/files/patch-src::meny::meny.cc @@ -1,5 +1,5 @@ ---- src/meny/meny.cc.orig Fri Jul 2 02:23:30 1999 -+++ src/meny/meny.cc Sun Jan 25 23:17:19 2004 +--- src/meny/meny.cc.orig Fri Sep 2 13:26:36 2005 ++++ src/meny/meny.cc Fri Sep 2 13:27:53 2005 @@ -124,7 +124,7 @@ return 1; } @@ -9,3 +9,25 @@ PALETTE pal; UrbanFont m(LARGE_FONT); m.SetScale(65); +@@ -194,7 +194,7 @@ + #ifdef DJGPP + sprintf(filename, "savegame.dat"); + #else +- sprintf(filename, "%s/.urban/savegame.dat", getenv("HOME")); ++ snprintf(filename, sizeof(filename)-1, "%s/.urban/savegame.dat", getenv("HOME")); + #endif + if ((fs = fopen(filename, "rb")) == NULL) { + for (int i = 0; i < 5;i++) { +@@ -203,10 +203,10 @@ + } + #ifndef DJGPP + /* Create dir */ +- sprintf(filename, "%s/.urban", getenv("HOME")); ++ snprintf(filename, sizeof(filename)-1, "%s/.urban", getenv("HOME")); + mkdir(filename, S_IRUSR | S_IWUSR | S_IXUSR); + +- sprintf(filename, "%s/.urban/savegame.dat", getenv("HOME")); ++ snprintf(filename, sizeof(filename)-1, "%s/.urban/savegame.dat", getenv("HOME")); + #endif + if((fs = fopen(filename, "wb")) != NULL) { + |