diff libpurple/protocols/jabber/buddy.c @ 17611:feac55968392

Now all ad-hoc commands have to be sent through jabber_adhoc_execute to be properly executed (including the form steps). This cleans up the code a bit, and avoids DOS attacks by flooding the client with malicious ad-hoc command forms that were not requested.

--- a/libpurple/protocols/jabber/buddy.c	Mon Jun 25 19:08:16 2007 +0000
+++ b/libpurple/protocols/jabber/buddy.c	Mon Jun 25 20:07:31 2007 +0000
@@ -1709,7 +1709,7 @@
 			continue;
 		for(commands = jbr->commands; commands; commands = g_list_next(commands)) {
 			JabberAdHocCommands *cmd = commands->data;
-			act = purple_menu_action_new(cmd->name, PURPLE_CALLBACK(jabber_adhoc_execute), cmd, NULL);
+			act = purple_menu_action_new(cmd->name, PURPLE_CALLBACK(jabber_adhoc_execute_action), cmd, NULL);
 			m = g_list_append(m, act);
 		}
 	}