avoid possible bogus pointer dereferences if there are %'s in the

250 response from DATA

SCCS-vsn: usr.sbin/sendmail/src/deliver.c 8.76

diff --git a/usr/src/usr.sbin/sendmail/src/deliver.c b/usr/src/usr.sbin/sendmail/src/deliver.c
index 8f84f56..e044ac2 100644 (file)
--- a/usr/src/usr.sbin/sendmail/src/deliver.c
+++ b/usr/src/usr.sbin/sendmail/src/deliver.c
@@ -7,7 +7,7 @@
  */
 
 #ifndef lint
  */
 
 #ifndef lint

-static char sccsid[] = "@(#)deliver.c  8.75 (Berkeley) %G%";
+static char sccsid[] = "@(#)deliver.c  8.76 (Berkeley) %G%";

 #endif /* not lint */
 
 #include "sendmail.h"
 #endif /* not lint */
 
 #include "sendmail.h"


@@ -1718,7 +1718,7 @@ giveresponse(stat, m, mci, ctladdr, e)
        {
                extern char MsgBuf[];
 
        {
                extern char MsgBuf[];
 

-               message(&statmsg[4], errstring(errno));
+               message("%s", &statmsg[4]);

                if (stat == EX_TEMPFAIL && e->e_xfp != NULL)
                        fprintf(e->e_xfp, "%s\n", &MsgBuf[4]);
        }
                if (stat == EX_TEMPFAIL && e->e_xfp != NULL)
                        fprintf(e->e_xfp, "%s\n", &MsgBuf[4]);
        }