Ticket #713: bb-fmt-sec.diff

bb-support.cpp

@@ -1576 +1576 @@
 int BBMessage(int type, char *text, char *def, char *c1, char *c2)
 {
   switch(type) {
-  case BB_MESSAGE: fl_message(text); return 0;
-  case BB_ALERT: fl_alert(text); return 0;
-  case BB_ASK: return fl_ask(text);
-  case BB_CHOICE: return fl_ask(text, def, c1, c2);
+  case BB_MESSAGE: fl_message("%s", text); return 0;
+  case BB_ALERT: fl_alert("%s", text); return 0;
+  case BB_ASK: return fl_ask("%s", text);
+  case BB_CHOICE: return fl_choice("%s", def, c1, c2, text);
   default: return 0;
   }
 }
@@ -1768 +1768 @@
 
 char *BBGetInput(char *label, char *def)
 {
-  return (char *)fl_input(label, def);
+  return (char *)fl_input("%s", def, label);
 }