Skip to content
Snippets Groups Projects
Commit ed1f4ab1 authored by Rob Swindell's avatar Rob Swindell :speech_balloon:
Browse files

Initialize time zone variable (zone)

As found and reported by Talisam author, apam (HAPPYLND).

sscanf() won't initialize the buffer of the argument passed if the format string is not matched, so when there was no hexadecimal/SMB timezone value, the timezone specified in the ISO date/time string (if any) would be overwritten with 0, converted from the uninitialized 'zone' variable (unlikely to be valid hex-ASCII chars). Thanks apam!
parent 47bb6691
No related branches found
No related tags found
1 merge request!463MRC mods by Codefenix (2024-10-20)
Pipeline #2469 passed
......@@ -26,7 +26,7 @@
static bool qwk_parse_header_list(sbbs_t* sbbs, ulong confnum, smbmsg_t* msg, str_list_t* headers, bool parse_sender_hfields, bool parse_recipient_hfields)
{
char* p;
char zone[32];
char zone[32] = "";
char value[INI_MAX_VALUE_LEN+1];
int i;
uint16_t net_type;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment