QuestHubber

23 - StaticPopup taint from insecure (Set)AbandonQuest hooks

12/10 22:43:14.017  Global variable SetAbandonQuest tainted by Ace3 - Interface\AddOns\Ace3\AceHook-3.0\AceHook-3.0.lua:245 hook()
12/10 22:43:14.017      Interface\AddOns\Ace3\AceHook-3.0\AceHook-3.0.lua:286 Hook()
12/10 22:43:14.017      Interface\AddOns\QuestHubber\QuestHubber.lua:284
12/10 22:43:14.017      xpcall()
12/10 22:43:14.017      safecall Dispatcher[1]:9
12/10 22:43:14.017      Interface\AddOns\Ace3\AceAddon-3.0\AceAddon-3.0.lua:543 EnableAddon()
12/10 22:43:14.017      Interface\AddOns\Ace3\AceAddon-3.0\AceAddon-3.0.lua:636
12/10 22:43:14.017      LoadAddOn()
12/10 22:43:14.017      Interface\FrameXML\UIParent.lua:299 UIParentLoadAddOn()
12/10 22:43:14.017      Interface\FrameXML\UIParent.lua:322 CombatLog_LoadUI()
12/10 22:43:14.017      Interface\FrameXML\UIParent.lua:692
12/10 22:43:14.017  Global variable AbandonQuest tainted by Ace3 - Interface\AddOns\Ace3\AceHook-3.0\AceHook-3.0.lua:245 hook()
12/10 22:43:14.017      Interface\AddOns\Ace3\AceHook-3.0\AceHook-3.0.lua:286 Hook()
12/10 22:43:14.017      Interface\AddOns\QuestHubber\QuestHubber.lua:285
12/10 22:43:14.017      xpcall()
12/10 22:43:14.017      safecall Dispatcher[1]:9
12/10 22:43:14.017      Interface\AddOns\Ace3\AceAddon-3.0\AceAddon-3.0.lua:543 EnableAddon()
12/10 22:43:14.017      Interface\AddOns\Ace3\AceAddon-3.0\AceAddon-3.0.lua:636
12/10 22:43:14.017      LoadAddOn()
12/10 22:43:14.017      Interface\FrameXML\UIParent.lua:299 UIParentLoadAddOn()
12/10 22:43:14.017      Interface\FrameXML\UIParent.lua:322 CombatLog_LoadUI()
12/10 22:43:14.017      Interface\FrameXML\UIParent.lua:692
12/10 23:39:08.877  Execution tainted by Ace3 while reading AbandonQuest - Interface\FrameXML\StaticPopup.lua:1958 OnAccept()
12/10 23:39:08.877      Interface\FrameXML\StaticPopup.lua:3897 StaticPopup_OnClick()
12/10 23:39:08.877      StaticPopup1Button1:OnClick()

Which of course blocks talent functions.  Please see if you can use secure posthooks to accomplish whatever it is you're doing.

User When Change
durcyn Dec 11, 2012 at 05:47 UTC Create

You must login to post a comment. Don't have an account? Register to get one!

Facts

Reported
Dec 11, 2012
Status
New - Issue has not had initial review yet.
Type
Defect - A shortcoming, fault, or imperfection
Priority
Medium - Normal priority.
Votes
0

Reported by

Possible assignees