mirror of
https://git.jabber.space/devs/cproof.git
synced 2026-07-28 21:46:21 +00:00
fix: address config injection and SIGCHLD handling
- Sanitize account names to prevent GKeyFile config injection by blocking special characters like #, \n, and \r. - Ensure GLib's SIGCHLD handler is initialized before forking external editors to prevent zombie processes. - Add missing error check for OMEMO random key generation. - Replace hardcoded console tab ID with a named constant. - Log invalid JIDs safely to prevent potential null pointer issues.
This commit is contained in:
@@ -32,6 +32,7 @@ Jid*
|
||||
jid_create(const gchar* const str)
|
||||
{
|
||||
if (!jid_is_valid(str)) {
|
||||
log_debug("[JID] invalid JID: '%s'", str ?: "(null)");
|
||||
return NULL;
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user