Don't call warn() with no format string. This is potentially exploitable, although it
would be difficult both technically and in practise.
This commit is contained in:
parent
6dc838f273
commit
b57d60cb8a
@ -193,7 +193,7 @@ done: argv += optind;
|
|||||||
}
|
}
|
||||||
if (chmod(p->fts_accpath, oct ? omode :
|
if (chmod(p->fts_accpath, oct ? omode :
|
||||||
getmode(set, p->fts_statp->st_mode)) && !fflag) {
|
getmode(set, p->fts_statp->st_mode)) && !fflag) {
|
||||||
warn(p->fts_path);
|
warn("%s", p->fts_path);
|
||||||
rval = 1;
|
rval = 1;
|
||||||
} else {
|
} else {
|
||||||
if (vflag)
|
if (vflag)
|
||||||
|
Loading…
Reference in New Issue
Block a user