Llewellyn/conky
1
0
Fork 0
mirror of https://github.com/Llewellynvdm/conky.git synced 2024-12-28 13:00:45 +00:00
Code Issues Releases Activity

Fix security bug in 's getSkillname

Browse Source
This commit is contained in:
Nikolas Garofil 2011-02-10 16:20:06 +01:00
parent 5a5e8f80b1
commit ac4a3682ae
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/eve.cc
View File

@ -285,7 +285,8 @@ static char *getSkillname(const char *file, int skillid)
if (!file_exists(file)) {
skilltree = getXmlFromAPI(NULL, NULL, NULL, EVEURL_SKILLTREE);
writeSkilltree(skilltree, file);
//2x file_exits() so that someone (malicious?) couldn't create it during during the previous call
if (!file_exists(file)) writeSkilltree(skilltree, file);
free(skilltree);
}