[packages/graphviz] - fix -Wformat-security errors - rel 8

baggins baggins at pld-linux.org
Mon Nov 12 12:30:33 CET 2012


commit aced2bd1722bc5c56c8d2812a7f35775f957cc8d
Author: Jan Rękorajski <baggins at pld-linux.org>
Date:   Mon Nov 12 12:30:20 2012 +0100

    - fix -Wformat-security errors
    - rel 8

 graphviz-format-security.patch | 88 ++++++++++++++++++++++++++++++++++++++++++
 graphviz.spec                  |  4 +-
 2 files changed, 91 insertions(+), 1 deletion(-)
---
diff --git a/graphviz.spec b/graphviz.spec
index 0d434f4..7d5b646 100644
--- a/graphviz.spec
+++ b/graphviz.spec
@@ -37,7 +37,7 @@ Summary:	Graph Visualization Tools
 Summary(pl.UTF-8):	Narzędzie do wizualizacji w postaci grafów
 Name:		graphviz
 Version:	2.28.0
-Release:	7
+Release:	8
 License:	CPL v1.0
 Group:		X11/Applications/Graphics
 Source0:	http://www.graphviz.org/pub/graphviz/ARCHIVE/%{name}-%{version}.tar.gz
@@ -52,6 +52,7 @@ Patch6:		%{name}-php_modules_dir.patch
 Patch7:		%{name}-ruby.patch
 Patch8:		%{name}-guile.patch
 Patch9:		%{name}-am.patch
+Patch10:	%{name}-format-security.patch
 URL:		http://www.graphviz.org/
 %{?with_devil:BuildRequires:	DevIL-devel}
 %{?with_r:BuildRequires:	R}
@@ -328,6 +329,7 @@ graphviz bindings for R language.
 %patch7 -p1
 %patch8 -p1
 %patch9 -p1
+%patch10 -p1
 
 %{__sed} '1s@/usr/bin/lua$@/usr/bin/lua51@' -i tclpkg/gv/demo/modgraph.lua
 
diff --git a/graphviz-format-security.patch b/graphviz-format-security.patch
new file mode 100644
index 0000000..63fe3e1
--- /dev/null
+++ b/graphviz-format-security.patch
@@ -0,0 +1,88 @@
+--- graphviz-2.28.0/lib/ortho/ortho.c~	2011-01-28 17:24:29.000000000 +0100
++++ graphviz-2.28.0/lib/ortho/ortho.c	2012-11-12 12:25:17.990615453 +0100
+@@ -1520,7 +1520,7 @@
+     absbb.LL.x = absbb.LL.y = MAXDOUBLE;
+     absbb.UR.x = absbb.UR.y = -MAXDOUBLE;
+ 
+-    fprintf (fp, prolog2);
++    fprintf (fp, "%s", prolog2);
+     fprintf (fp, "%d %d translate\n", TRANS, TRANS);
+ 
+     fputs ("0 0 1 setrgbcolor\n", fp);
+--- graphviz-2.28.0/cmd/tools/gc.c~	2011-01-25 17:30:47.000000000 +0100
++++ graphviz-2.28.0/cmd/tools/gc.c	2012-11-12 12:26:27.693946328 +0100
+@@ -91,7 +91,7 @@
+ 
+ static void usage(int v)
+ {
+-    printf(useString);
++    printf("%s", useString);
+     exit(v);
+ }
+ 
+--- graphviz-2.28.0/cmd/tools/gvcolor.c~	2011-01-25 17:30:47.000000000 +0100
++++ graphviz-2.28.0/cmd/tools/gvcolor.c	2012-11-12 12:26:57.773945267 +0100
+@@ -91,7 +91,7 @@
+ 
+ static void usage(int v)
+ {
+-    printf(useString);
++    printf("%s", useString);
+     exit(v);
+ }
+ 
+--- graphviz-2.28.0/cmd/tools/nop.c~	2011-01-25 17:30:47.000000000 +0100
++++ graphviz-2.28.0/cmd/tools/nop.c	2012-11-12 12:27:16.403944610 +0100
+@@ -44,7 +44,7 @@
+ 
+ static void usage(int v)
+ {
+-    printf(useString);
++    printf("%s", useString);
+     exit(v);
+ }
+ 
+--- graphviz-2.28.0/cmd/tools/ccomps.c~	2011-04-29 20:46:20.000000000 +0200
++++ graphviz-2.28.0/cmd/tools/ccomps.c	2012-11-12 12:27:33.057277356 +0100
+@@ -102,7 +102,7 @@
+ 
+ static void usage(int v)
+ {
+-    printf(useString);
++    printf("%s", useString);
+     exit(v);
+ }
+ 
+--- graphviz-2.28.0/cmd/tools/gvpack.c~	2011-01-25 17:30:47.000000000 +0100
++++ graphviz-2.28.0/cmd/tools/gvpack.c	2012-11-12 12:27:51.010610055 +0100
+@@ -113,7 +113,7 @@
+ 
+ static void usage(int v)
+ {
+-    printf(useString);
++    printf("%s", useString);
+     exit(v);
+ }
+ 
+--- graphviz-2.28.0/cmd/tools/dijkstra.c~	2011-04-18 23:32:17.000000000 +0200
++++ graphviz-2.28.0/cmd/tools/dijkstra.c	2012-11-12 12:28:09.517276069 +0100
+@@ -241,7 +241,7 @@
+ 
+ static void usage(int v)
+ {
+-    printf(useString);
++    printf("%s", useString);
+     exit(v);
+ }
+ 
+--- graphviz-2.28.0/cmd/tools/bcomps.c~	2011-01-25 17:30:47.000000000 +0100
++++ graphviz-2.28.0/cmd/tools/bcomps.c	2012-11-12 12:28:29.150608710 +0100
+@@ -322,7 +322,7 @@
+ 
+ static void usage(int v)
+ {
+-    printf(useString);
++    printf("%s", useString);
+     exit(v);
+ }
+ 
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/graphviz.git/commitdiff/aced2bd1722bc5c56c8d2812a7f35775f957cc8d



More information about the pld-cvs-commit mailing list