linuxdcpp-team team mailing list archive

Thread
Date

[Branch ~dcplusplus-team/dcplusplus/trunk] Rev 3166: Fix security issue with URI registering

To: LinuxDC++ Team <linuxdcpp-team@xxxxxxxxxxxxxxxxxxx>
From: noreply@xxxxxxxxxxxxx
Date: Fri, 04 Jan 2013 22:20:19 -0000
Reply-to: noreply@xxxxxxxxxxxxx
Sender: bounces@xxxxxxxxxxxxx

------------------------------------------------------------
revno: 3166
author: Ullner
committer: iceman50 <bdcdevel@xxxxxxxxx>
branch nick: dcplusplus
timestamp: Fri 2013-01-04 16:18:19 -0600
message:
  Fix security issue with URI registering
modified:
  win32/WinUtil.cpp


--
lp:dcplusplus
https://code.launchpad.net/~dcplusplus-team/dcplusplus/trunk

Your team Dcplusplus-team is subscribed to branch lp:dcplusplus.
To unsubscribe from this branch go to https://code.launchpad.net/~dcplusplus-team/dcplusplus/trunk/+edit-subscription

=== modified file 'win32/WinUtil.cpp'
--- win32/WinUtil.cpp	2012-12-27 15:32:46 +0000
+++ win32/WinUtil.cpp	2013-01-04 22:18:19 +0000
@@ -1305,7 +1305,7 @@
 		::RegCloseKey(hk);
 	}
 
-	tstring app = _T("\"") + dwt::Application::instance().getModuleFileName() + _T("\" %1");
+	tstring app = _T("\"") + dwt::Application::instance().getModuleFileName() + _T("\" \"%1\"");
 	if(Util::stricmp(app.c_str(), Buf) == 0) {
 		// already registered to us
 		return true;