pidgin/pidgin

Prevent spoofing of iq replies by verifying that the 'from' address
release-2.x.y
2014-01-12, Mark Doliner
93d4bff19574
file isExecutable
Prevent spoofing of iq replies by verifying that the 'from' address
matches the 'to' address of the iq request.

This full extent of this problem was realized by Thijs Alkemade, while
investigating a problem reported to us by Fabian Yamaguchi and Christian
Wressnegger of the University of Goettingen)

This change was created by Thijs Alkemade, with small shuffling and
variable renaming by me.
#!/bin/sh
METHOD_NAME=$1
if test -z "$METHOD_NAME"
then
cat <<EOF
This program calls purple API functions using DBus and prints the return value.
If you are not interested in the return value, use purple-send-async.
Usage:
$0 method-name type1:parameter1 type2:parameter2 ...
This shell script just invokes dbus-send, see man dbus-send for how
to specify the parameters.
Examples:
$0 PurpleAccountsFindConnected string: string:prpl-jabber
$0 PurpleAccountsGetAll
$0 PurpleCoreQuit
Use dbus-viewer to get the list of supported functions and their parameters.
EOF
exit 1
fi
shift
dbus-send --dest=im.pidgin.purple.PurpleService --print-reply --type=method_call /im/pidgin/purple/PurpleObject im.pidgin.purple.PurpleInterface.$METHOD_NAME "$@"