From 35f97b65c1243afdf617a8327319006456bf85b0 Mon Sep 17 00:00:00 2001 From: Patrick Griffis Date: Thu, 28 Jan 2016 16:22:04 -0500 Subject: [PATCH] Sanitize server name for log files It could contain invalid chars or log to an arbitrary directory --- src/common/text.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/common/text.c b/src/common/text.c index 8cf850ba..766d2dd9 100644 --- a/src/common/text.c +++ b/src/common/text.c @@ -527,9 +527,12 @@ log_create_pathname (char *servname, char *channame, char *netname) channame = log_create_filename (channame); } + servname = log_create_filename (servname); + log_insert_vars (fname, sizeof (fname), prefs.hex_irc_logmask, channame, netname, servname); g_free (channame); g_free (netname); + g_free (servname); /* insert time/date */ now = time (NULL);