mirror/flatpak
1
0
Fork 0
mirror of https://github.com/flatpak/flatpak.git synced 2026-05-18 21:55:22 -04:00
Code Issues Packages Projects Releases Wiki Activity

completion: Always pass a format string to flatpak_completion_debug

Browse Source 
In principle this could have been subject to a format string attack
via an argument containing %n, although in practice the code that uses
this format string is #if 0.

Signed-off-by: Simon McVittie <smcv@collabora.com>
This commit is contained in:
Simon McVittie
2021-05-20 17:53:16 +01:00
committed by Alexander Larsson
parent 3d5725f9d3
commit 0592caca8a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/flatpak-complete.c
View File

@@ -632,7 +632,7 @@ flatpak_completion_new (const char *arg_line,
flatpak_completion_debug ("completion_argv %i:", completion->original_argc);
for (i = 0; i < completion->original_argc; i++)
flatpak_completion_debug (completion->original_argv[i]);
flatpak_completion_debug ("%s", completion->original_argv[i]);
flatpak_completion_debug ("----");