SoniEx2
/
c.sexchat
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix unsafe string handling in configs 

Also fixes 2 leaks
This commit is contained in:
TingPing 2014-12-10 09:32:16 -05:00
parent 025152ee53
commit 10246f121a
2 changed files with 21 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
src/common/cfgfiles.c
View File

@ -855,34 +855,36 @@ load_default_config(void)
#else #else
if (g_get_user_special_dir (G_USER_DIRECTORY_DOWNLOAD)) if (g_get_user_special_dir (G_USER_DIRECTORY_DOWNLOAD))
{ {
strcpy (prefs.hex_dcc_dir, g_get_user_special_dir (G_USER_DIRECTORY_DOWNLOAD)); safe_strcpy (prefs.hex_dcc_dir, g_get_user_special_dir (G_USER_DIRECTORY_DOWNLOAD), sizeof(prefs.hex_dcc_dir));
} }
else else
{ {
strcpy (prefs.hex_dcc_dir, g_build_filename (g_get_home_dir (), "Downloads", NULL)); char *download_dir = g_build_filename (g_get_home_dir (), "Downloads", NULL);
safe_strcpy (prefs.hex_dcc_dir, download_dir, sizeof(prefs.hex_dcc_dir));
g_free (download_dir);
} }
#endif #endif
strcpy (prefs.hex_gui_ulist_doubleclick, "QUERY %s"); strcpy (prefs.hex_gui_ulist_doubleclick, "QUERY %s");
strcpy (prefs.hex_input_command_char, "/"); strcpy (prefs.hex_input_command_char, "/");
strcpy (prefs.hex_irc_logmask, g_build_filename ("%n", "%c.log", NULL)); strcpy (prefs.hex_irc_logmask, "%n"G_DIR_SEPARATOR_S"%c.log");
strcpy (prefs.hex_irc_nick1, username); safe_strcpy (prefs.hex_irc_nick1, username, sizeof(prefs.hex_irc_nick1));
strcpy (prefs.hex_irc_nick2, username); safe_strcpy (prefs.hex_irc_nick2, username, sizeof(prefs.hex_irc_nick2));
strcat (prefs.hex_irc_nick2, "_"); g_strlcat (prefs.hex_irc_nick2, "_", sizeof(prefs.hex_irc_nick2));
strcpy (prefs.hex_irc_nick3, username); safe_strcpy (prefs.hex_irc_nick3, username, sizeof(prefs.hex_irc_nick3));
strcat (prefs.hex_irc_nick3, "__"); g_strlcat (prefs.hex_irc_nick3, "__", sizeof(prefs.hex_irc_nick3));
strcpy (prefs.hex_irc_no_hilight, "NickServ,ChanServ,InfoServ,N,Q"); strcpy (prefs.hex_irc_no_hilight, "NickServ,ChanServ,InfoServ,N,Q");
strcpy (prefs.hex_irc_part_reason, _("Leaving")); safe_strcpy (prefs.hex_irc_part_reason, _("Leaving"), sizeof(prefs.hex_irc_part_reason));
strcpy (prefs.hex_irc_quit_reason, prefs.hex_irc_part_reason); safe_strcpy (prefs.hex_irc_quit_reason, prefs.hex_irc_part_reason, sizeof(prefs.hex_irc_quit_reason));
strcpy (prefs.hex_irc_real_name, realname); safe_strcpy (prefs.hex_irc_real_name, realname, sizeof(prefs.hex_irc_real_name));
strcpy (prefs.hex_irc_user_name, username); safe_strcpy (prefs.hex_irc_user_name, username, sizeof(prefs.hex_irc_user_name));
strcpy (prefs.hex_stamp_log_format, "%b %d %H:%M:%S "); strcpy (prefs.hex_stamp_log_format, "%b %d %H:%M:%S ");
strcpy (prefs.hex_stamp_text_format, "[%H:%M:%S] "); strcpy (prefs.hex_stamp_text_format, "[%H:%M:%S] ");
font = fe_get_default_font (); font = fe_get_default_font ();
if (font) if (font)
{ {
strcpy (prefs.hex_text_font, font); safe_strcpy (prefs.hex_text_font, font, sizeof(prefs.hex_text_font));
strcpy (prefs.hex_text_font_main, font); safe_strcpy (prefs.hex_text_font_main, font, sizeof(prefs.hex_text_font_main));
} }
else else
{ {
@ -892,7 +894,7 @@ load_default_config(void)
strcpy (prefs.hex_text_font_alternative, DEF_FONT_ALTER); strcpy (prefs.hex_text_font_alternative, DEF_FONT_ALTER);
langs = get_default_spell_languages (); langs = get_default_spell_languages ();
strcpy (prefs.hex_text_spell_langs, langs); safe_strcpy (prefs.hex_text_spell_langs, langs, sizeof(prefs.hex_text_spell_langs));
/* private variables */ /* private variables */

8
src/fe-gtk/servlistgui.c
View File

@ -960,10 +960,10 @@ servlist_savegui (void)
if (!rfc_casecmp (nick1, nick2)) if (!rfc_casecmp (nick1, nick2))
return 2; return 2;
strcpy (prefs.hex_irc_nick1, nick1); safe_strcpy (prefs.hex_irc_nick1, nick1, sizeof(prefs.hex_irc_nick1));
strcpy (prefs.hex_irc_nick2, nick2); safe_strcpy (prefs.hex_irc_nick2, nick2, sizeof(prefs.hex_irc_nick2));
strcpy (prefs.hex_irc_nick3, gtk_entry_get_text (GTK_ENTRY (entry_nick3))); safe_strcpy (prefs.hex_irc_nick3, gtk_entry_get_text (GTK_ENTRY (entry_nick3)), sizeof(prefs.hex_irc_nick3));
strcpy (prefs.hex_irc_user_name, gtk_entry_get_text (GTK_ENTRY (entry_guser))); safe_strcpy (prefs.hex_irc_user_name, gtk_entry_get_text (GTK_ENTRY (entry_guser)), sizeof(prefs.hex_irc_user_name));
sp = strchr (prefs.hex_irc_user_name, ' '); sp = strchr (prefs.hex_irc_user_name, ' ');
if (sp) if (sp)
sp[0] = 0; /* spaces will break the login */ sp[0] = 0; /* spaces will break the login */