diff finch/libgnt/gnttree.c @ 29467:40623dd0bba0

Fix CVE-2010-0420, a possible remote crash when handling chat room buddy names.
author Mark Doliner <mark@kingant.net>
date Tue, 16 Feb 2010 08:58:45 +0000
parents a8614b855c39
children e1b511df0d3e
line wrap: on
line diff
--- a/finch/libgnt/gnttree.c	Tue Feb 16 08:54:07 2010 +0000
+++ b/finch/libgnt/gnttree.c	Tue Feb 16 08:58:45 2010 +0000
@@ -1346,6 +1346,10 @@
 {
 	GntTreeRow *pr = NULL;
 
+	if (g_hash_table_lookup(tree->hash, key)) {
+		gnt_tree_remove(tree, key);
+	}
+
 	row->tree = tree;
 	row->key = key;
 	row->data = NULL;