pidgin/pidgin

Fix TALOS-CAN-0128
release-2.x.y
2016-06-02, Andrew Victor
5fa3f2bc69d7
Parents 5e5e84e8a798
Children 5a52057be411
Fix TALOS-CAN-0128
1 files changed, 2 insertions(+), 2 deletions(-)
  • +2 -2
    libpurple/protocols/mxit/splashscreen.c
    • --- a/libpurple/protocols/mxit/splashscreen.c Sun May 15 05:41:39 2016 -0300
    +++ b/libpurple/protocols/mxit/splashscreen.c Thu Jun 02 15:04:13 2016 -0500
    @@ -93,7 +93,7 @@
    purple_debug_info(MXIT_PLUGIN_ID, "Removing splashId: '%s'\n", splashId);
    /* Delete stored splash image */
    - filename = g_strdup_printf("%s" G_DIR_SEPARATOR_S "mxit" G_DIR_SEPARATOR_S "%s.png", purple_user_dir(), splashId);
    + filename = g_strdup_printf("%s" G_DIR_SEPARATOR_S "mxit" G_DIR_SEPARATOR_S "%s.png", purple_user_dir(), purple_escape_filename(splashId));
    g_unlink(filename);
    g_free(filename);
    @@ -179,7 +179,7 @@
    purple_debug_info(MXIT_PLUGIN_ID, "Display Splash: '%s'\n", splashId);
    /* Load splash-screen image from file */
    - filename = g_strdup_printf("%s" G_DIR_SEPARATOR_S "mxit" G_DIR_SEPARATOR_S "%s.png", purple_user_dir(), splashId);
    + filename = g_strdup_printf("%s" G_DIR_SEPARATOR_S "mxit" G_DIR_SEPARATOR_S "%s.png", purple_user_dir(), purple_escape_filename(splashId));
    if (g_file_get_contents(filename, &imgdata, &imglen, NULL)) {
    char buf[128];