From eee3dc4671e3517bc7dd539682a94432c2e1fe5d Mon Sep 17 00:00:00 2001 From: tma Date: Tue, 22 Jan 2008 23:44:10 +0000 Subject: * (bug 3412) %s expansion security patch (DevHC) git-svn-id: svn://svn.icculus.org/quake3/trunk@1250 edf5b092-35ff-0310-97b2-ce42778d08ea --- code/ui/ui_main.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'code/ui') diff --git a/code/ui/ui_main.c b/code/ui/ui_main.c index f1eae14..dcf6743 100644 --- a/code/ui/ui_main.c +++ b/code/ui/ui_main.c @@ -4991,7 +4991,7 @@ static void UI_BuildQ3Model_List( void ) if (Q_stricmpn(skinname, "icon_", 5) == 0 && !(Q_stricmp(skinname,"icon_blue") == 0 || Q_stricmp(skinname,"icon_red") == 0)) { if (Q_stricmp(skinname, "icon_default") == 0) { - Com_sprintf( scratch, sizeof(scratch), dirptr); + Com_sprintf( scratch, sizeof(scratch), "%s", dirptr); } else { Com_sprintf( scratch, sizeof(scratch), "%s/%s",dirptr, skinname + 5); } @@ -5003,7 +5003,7 @@ static void UI_BuildQ3Model_List( void ) } } if (!dirty) { - Com_sprintf( uiInfo.q3HeadNames[uiInfo.q3HeadCount], sizeof(uiInfo.q3HeadNames[uiInfo.q3HeadCount]), scratch); + Com_sprintf( uiInfo.q3HeadNames[uiInfo.q3HeadCount], sizeof(uiInfo.q3HeadNames[uiInfo.q3HeadCount]), "%s", scratch); uiInfo.q3HeadIcons[uiInfo.q3HeadCount++] = trap_R_RegisterShaderNoMip(va("models/players/%s/%s",dirptr,skinname)); } } -- cgit v1.2.3