EliasOenal / multimon-ng

GNU General Public License v2.0
923 stars 206 forks source link

demod_flex_next.c: parse_alphanumeric: Fix format string bug #211

Closed v-rzh closed 8 months ago

v-rzh commented 8 months ago

The message contents were trusted as a format argument, resulting in a potential format string bug. This commit fixes the issue.

v-rzh commented 8 months ago

@EliasOenal this isn't really a bug like it was in demod_flex.c since add_ch sanitizes % from the pager messages, however if there is any code changes/moves at some point this bug could slip through the cracks, so I think it's best to follow this practice.

EliasOenal commented 8 months ago

Thanks!

v-rzh commented 8 months ago

Thanks!

Thanks for maintaining this project :)