[packages/pfstools] - fix printf format error - rel 3

baggins baggins at pld-linux.org
Thu Apr 4 21:54:57 CEST 2013


commit 7d4217910838576f74ab5ce4b9ec5886f0343419
Author: Jan Rękorajski <baggins at pld-linux.org>
Date:   Thu Apr 4 21:54:42 2013 +0200

    - fix printf format error
    - rel 3

 format-security.patch | 11 +++++++++++
 pfstools.spec         |  4 +++-
 2 files changed, 14 insertions(+), 1 deletion(-)
---
diff --git a/pfstools.spec b/pfstools.spec
index 7abef9d..96c7c45 100644
--- a/pfstools.spec
+++ b/pfstools.spec
@@ -7,12 +7,13 @@ Summary:	pfstools for High Dynamic Range Images and Video
 Summary(pl.UTF-8):	Narzędzia do obrazów i wideo o dużym zakresie luminancji
 Name:		pfstools
 Version:	1.8.5
-Release:	2
+Release:	3
 License:	LGPL v2.1+
 Group:		Libraries
 Source0:	http://downloads.sourceforge.net/pfstools/%{name}-%{version}.tar.gz
 # Source0-md5:	80dac70bfb6359a6749453477e74b112
 Patch0:		%{name}-opt.patch
+Patch1:		format-security.patch
 URL:		http://pfstools.sourceforge.net/
 BuildRequires:	ImageMagick-c++-devel >= 6.0
 BuildRequires:	OpenEXR-devel >= 1.0
@@ -101,6 +102,7 @@ Wiązania języka Octave do pfstools.
 %prep
 %setup -q
 %patch0 -p1
+%patch1 -p1
 
 %build
 %{__libtoolize}
diff --git a/format-security.patch b/format-security.patch
new file mode 100644
index 0000000..c407b82
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,11 @@
+--- pfstools-1.8.5/src/pfs/pfs.cpp~	2010-07-14 11:44:27.000000000 +0200
++++ pfstools-1.8.5/src/pfs/pfs.cpp	2013-04-04 21:50:17.637534986 +0200
+@@ -525,7 +525,7 @@
+   TagList::const_iterator it;
+   fprintf( out, "%d" PFSEOL, tags->getSize() );
+   for( it = tags->tagsBegin(); it != tags->tagsEnd(); it++ ) {
+-    fprintf( out, (const char*)(it->c_str()) );
++    fprintf( out, "%s", (const char*)(it->c_str()) );
+     fprintf( out, PFSEOL );
+   }
+ }
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/pfstools.git/commitdiff/7d4217910838576f74ab5ce4b9ec5886f0343419



More information about the pld-cvs-commit mailing list