-
- Downloads
shell32/autocomplete: Fix a vulnerability by avoiding the use of snprintf.
The quickComplete format can have more than one % argument, or stuff like %*.* or %1234s, which can be exploited since the format string can be read from the registry, so handle it manually instead of using sprintf. Signed-off-by:Gabriel Ivăncescu <gabrielopcode@gmail.com> Signed-off-by:
Huw Davies <huw@codeweavers.com> Signed-off-by:
Alexandre Julliard <julliard@winehq.org>
Please register or sign in to comment