[Nano-devel] Crashes when tab-expanding filenames with percent signs

[Ulf Härnhammar]

Hello,

GNU nano doesn't handle tab-expanding filenames containing percent signs very
well, because of a bad snprintf() call in files.c. You have used user-supplied
data as the format string instead of as parameters to *printf().

To reproduce:

1. touch xerxes x%n%n%n%n
2. nano
3. Ctrl-R x <TAB> <TAB>
4. Segmentation fault

This problem exists at least in 1.2.4, 1.3.4 and the latest CVS version.

I have attached a patch for this problem (made as a diff against 1.2.4,
but it applies to later versions as well).

// Ulf Harnhammar
   http://www.advogato.org/person/metaur/

nano.formstring.patch
Description: Text document