Files
cproof/src/plugins
jabber.developer2 92953099e1
All checks were successful
CI Code / Check spelling (pull_request) Successful in 21s
CI Code / Check coding style (pull_request) Successful in 38s
CI Code / Linux (ubuntu) (pull_request) Successful in 6m25s
CI Code / Linux (debian) (pull_request) Successful in 9m11s
CI Code / Code Coverage (pull_request) Successful in 9m13s
CI Code / Linux (arch) (pull_request) Successful in 11m27s
fix: CWE-134 format string vulnerability audit
Security:
- Fix CWE-134 in iq.c: user-controlled string passed as format arg

Annotations:
- Add G_GNUC_PRINTF to variadic functions in ui.h and log.h

Compiler flags (configure.ac):
- Add -Wformat -Wformat-nonliteral -Wno-format-zero-length

Format mismatch fixes:
- chatwin.c: Jid* instead of char* for %s
- connection.c: %x -> %lx for long flags
- cmd_funcs.c: %d -> %zu for MB_CUR_MAX/MB_LEN_MAX (size_t)
- cmd_funcs.c: cast gpointer to (char*) for %s
- cmd_defs.c: %d -> %u for g_list_length() (guint)
- iq.c: from_jid->barejid -> from_jid->fulljid
- console.c, mucwin.c, privwin.c, account.c, omemo.c, presence.c:
  gpointer -> (char*) casts for %s

Bug fixes:
- api.c: broken log_warning() calls with extra format arg
- cmd_funcs.c: remove unused arg from cons_show()

Tooling:
- Expand check-cwe134.sh detection patterns
2026-03-03 16:29:25 +03:00
..
2025-10-20 19:00:48 +02:00
2020-07-07 14:18:57 +02:00
2025-10-20 19:00:48 +02:00
2020-07-07 14:18:57 +02:00
2020-07-07 14:18:57 +02:00
2020-07-07 14:18:57 +02:00
2020-07-07 14:18:57 +02:00
2020-07-07 14:18:57 +02:00
2020-07-07 14:18:57 +02:00
2020-07-07 14:18:57 +02:00
2020-07-07 14:18:57 +02:00