evie/AFNetworking
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Very minor security fix.

Browse source 
`informativeTextWithFormat` interprets its string as a format. `[error localizedDescription]` could contain string formatting specifiers.

Fixes to use @"%@", [error localizedDescription] instead.

Spotted via compiler warning.
This commit is contained in:
Steven Fisher 2012-07-23 11:11:29 -07:00
parent 69da97c5a8
commit 25186f8ebf
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
Example/Classes/Models/Tweet.m
View file

@ -67,7 +67,7 @@
#if __IPHONE_OS_VERSION_MIN_REQUIRED
[[[UIAlertView alloc] initWithTitle:NSLocalizedString(@"Error", nil) message:[error localizedDescription] delegate:nil cancelButtonTitle:nil otherButtonTitles:NSLocalizedString(@"OK", nil), nil] show];
#else
[[NSAlert alertWithMessageText:NSLocalizedString(@"Error", nil) defaultButton:NSLocalizedString(@"OK", nil) alternateButton:nil otherButton:nil informativeTextWithFormat:[error localizedDescription]] runModal];
[[NSAlert alertWithMessageText:NSLocalizedString(@"Error", nil) defaultButton:NSLocalizedString(@"OK", nil) alternateButton:nil otherButton:nil informativeTextWithFormat:@"%@",[error localizedDescription]] runModal];
#endif
if (block) {
block(nil);