From bfcb8ca0196eef942e6363e2fd7faa80eddec644 Mon Sep 17 00:00:00 2001
From: V <v@anomalous.eu>
Date: Fri, 8 Jan 2021 05:11:45 +0100
Subject: InfoScreen: fix uncontrolled format string

mvwprintw takes a format string as its fourth argument, and title is
user-controlled. This results in e.g. crashing when trying to trace a
process with a format specifier in its command line.
---
 InfoScreen.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/InfoScreen.c b/InfoScreen.c
index 3681088a..9647b9fe 100644
--- a/InfoScreen.c
+++ b/InfoScreen.c
@@ -54,7 +54,7 @@ void InfoScreen_drawTitled(InfoScreen* this, const char* fmt, ...) {
 
    attrset(CRT_colors[METER_TEXT]);
    mvhline(0, 0, ' ', COLS);
-   mvwprintw(stdscr, 0, 0, title);
+   mvaddstr(0, 0, title);
    attrset(CRT_colors[DEFAULT_COLOR]);
    Panel_draw(this->display, true, true, true, false);
 
-- 
cgit v1.2.3