Merge pull request #339 from evhskurk/master

PAUSE: format string injections are too exciting
QW-Group · Apr 3, 2024 · d33f0e7 · d33f0e7
2 parents 962a82a + a8ab437
commit d33f0e7
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/commands.c b/src/commands.c
@@ -8354,7 +8354,7 @@ void PausedTic(int duration)
 
 		if (time != prevtime) {
 			for (p = world; (p = find_client(p));)
-			{	
+			{
 				stuffcmd(p, "play buttons/switch04.wav\n");
 			}
 
@@ -8448,7 +8448,7 @@ void TogglePause()
 		}
 
 		when_to_pause = g_globalvars.time + 3;
-		snprintf(pause_name, sizeof(pause_name), self->netname);
+		strlcpy(pause_name, self->netname, sizeof(pause_name));
 		pauses_remaining = self->k_pauseRequests;
 	}
 }