view libpurple/purple-send-async @ 32100:d732689006ed

Fix a potential null pointer dereference in the MSN protocol, discovered by Marius Wachtler and reported to security@pidgin.im on March 22nd. This one is kinda rare, and requires someone to perform a man-in-the-middle attack in order to cause the crash. So we're not going to go through the CVE process for it (at least... probably not).
author Mark Doliner <mark@kingant.net>
date Tue, 07 Jun 2011 08:13:59 +0000
parents cea56d000b16
children
line wrap: on
line source

#!/bin/sh

METHOD_NAME=$1

if test -z "$METHOD_NAME"
then
    cat <<EOF
This program calls purple API functions using DBus.  As opposed to purple-send,
it does not print the return value.

Usage:

   $0 method-name type1:parameter1 type2:parameter2 ...

This shell script just invokes dbus-send, see man dbus-send for how
to specify the parameters.

Examples:

   $0 PurpleCoreQuit

Use dbus-viewer to get the list of supported functions and their parameters.
EOF
    exit 1
fi

shift
dbus-send --dest=im.pidgin.purple.PurpleService --type=method_call /im/pidgin/purple/PurpleObject im.pidgin.purple.PurpleInterface.$METHOD_NAME "$@"