commit 1bb61b1da84f5690f3125d4f6595b833632622b4
from: Stefan Sperling <stsp@stsp.name>
date: Sat Sep 02 17:31:44 2023 UTC

fix bogus pointer being passed to fill_tmpfile() for T_HANDLER_FILL1

The actual list of arguments was not passed to the handler.
Instead the handler got garbage in the argument list.

ok Tom

commit - 330fe27c7fd1e395ae626f5b6e64cf527f0ae951
commit + 1bb61b1da84f5690f3125d4f6595b833632622b4
blob - 4011e0f3cb3a14e6359f82f82497db29b47dcd89
blob + 407a33805d855e38bbb8d2106b5ae650ca1bf46b
--- ctl.c
+++ ctl.c
@@ -672,7 +672,7 @@ ctlhandler(int argc, char **argv, char *modhvar)
 	break;
 	case T_HANDLER_FILL1:
 		/* pointer to handler routine, fill args @ args[1] pointer */
-		if (fill_tmpfile((char **)fillargs[1], tmpfile, tmp_args))
+		if (fill_tmpfile((char **)&fillargs[1], tmpfile, tmp_args))
 			(*x->handler)(fillargs[0], tmp_args, fillargs[2]);
 		else
 			(*x->handler)(fillargs[0], (char **)fillargs[1], fillargs[2]);