[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]
format string bug in nm_info_handler
- From: Ian Jackson <ian davenant greenend org uk>
- To: networkmanager-list gnome org
- Cc: Thomas Hood <jdthood aglu demon nl>, thom may ubuntu com
- Subject: format string bug in nm_info_handler
- Date: Thu, 28 Jul 2005 15:58:04 +0100
static void
nm_info_handler (const gchar *log_domain,
GLogLevelFlags log_level,
const gchar *message,
gboolean is_daemon)
{
...
syslog (syslog_priority, message);
}
This should read:
syslog (syslog_priority, "%s", message);
I can't figure out whether this is exploitable. That would depend on
what kinds of messages an attacker could get passed g_log.
Ian.
[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]