Mercurial > pidgin.yaz
diff finch/libgnt/gnttree.c @ 29467:40623dd0bba0
Fix CVE-2010-0420, a possible remote crash when handling chat room
buddy names.
author | Mark Doliner <mark@kingant.net> |
---|---|
date | Tue, 16 Feb 2010 08:58:45 +0000 |
parents | a8614b855c39 |
children | e1b511df0d3e |
line wrap: on
line diff
--- a/finch/libgnt/gnttree.c Tue Feb 16 08:54:07 2010 +0000 +++ b/finch/libgnt/gnttree.c Tue Feb 16 08:58:45 2010 +0000 @@ -1346,6 +1346,10 @@ { GntTreeRow *pr = NULL; + if (g_hash_table_lookup(tree->hash, key)) { + gnt_tree_remove(tree, key); + } + row->tree = tree; row->key = key; row->data = NULL;