irc: fix uncontrolled format string when sending ison command (for nicks monitored by /notify)

2 files changed, 3 insertions, 1 deletions

diff --git a/ChangeLog b/ChangeLog
index 47100fd75..432b5d5b7 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -60,6 +60,8 @@ Version 0.4.1 (under dev!)
   list with arguments inside), guile >= 2.0 is now required (bug #38350)
 * guile: fix crash on calls to callbacks during load of script (bug #38343)
 * guile: fix compilation with guile 2.0
+* irc: fix uncontrolled format string when sending ison command (for nicks
+  monitored by /notify)
 * irc: fix refresh of nick in input bar when joining a new channel with op
   status (bug #38969)
 * irc: fix display of CTCP messages that contain bold attribute (bug #38895)
diff --git a/src/plugins/irc/irc-notify.c b/src/plugins/irc/irc-notify.c
index c185ea1a7..91b794864 100644
--- a/src/plugins/irc/irc-notify.c
+++ b/src/plugins/irc/irc-notify.c
@@ -889,7 +889,7 @@ irc_notify_timer_ison_cb (void *data, int remaining_calls)
                                           NULL, 0, NULL);
                         irc_server_sendf (ptr_server,
                                           IRC_SERVER_SEND_OUTQ_PRIO_LOW,
-                                          NULL, str_message);
+                                          NULL, "%s", str_message);
                         number++;
                     }
                     weechat_hashtable_free (hashtable);