1. Forum
  2. FidoNET
  3. SYNC PROGRAMMING

  • src/sbbs3/qwk.cpp qwktomsg.cpp

    From Rob Swindell (on Debian Linux)@1:103/705 to Git commit to main/sbbs/master on Sunday, April 05, 2026 12:08:30
    https://gitlab.synchro.net/main/sbbs/-/commit/437fce8269f3625e1c71314e
    Modified Files:
    src/sbbs3/qwk.cpp qwktomsg.cpp
    Log Message:
    Claude pointed out that these sscanf() calls are potentially dangerous

    Specify the max length (4 chars) of the hex-encoded SMB timezone in the format string to "harden" them.
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)