[packages/pdflib] - fix format string errors - rel 27

baggins baggins at pld-linux.org
Tue Jun 11 13:58:05 CEST 2013


commit 33ce2ce5a2048ecbceb246d6ede1541c42e79dd4
Author: Jan Rękorajski <baggins at pld-linux.org>
Date:   Tue Jun 11 13:57:51 2013 +0200

    - fix format string errors
    - rel 27

 format-security.patch | 53 +++++++++++++++++++++++++++++++++++++++++++++++++++
 pdflib.spec           |  4 +++-
 2 files changed, 56 insertions(+), 1 deletion(-)
---
diff --git a/pdflib.spec b/pdflib.spec
index 8e10820..03b73ea 100644
--- a/pdflib.spec
+++ b/pdflib.spec
@@ -19,7 +19,7 @@ Summary:	Portable C library for dynamically generating PDF files
 Summary(pl.UTF-8):	Przenośna biblioteka C do dynamicznego generowania plików PDF
 Name:		pdflib
 Version:	4.0.3
-Release:	26
+Release:	27
 License:	Aladdin Free Public License
 Group:		Libraries
 Source0:	%{name}-%{version}.tar.gz
@@ -31,6 +31,7 @@ Patch3:		%{name}-pdflib_pl_pm_VERSION.patch
 Patch4:		%{name}-ac.patch
 Patch5:		%{name}-build.patch
 Patch6:		%{name}-libpng.patch
+Patch7:		format-security.patch
 URL:		http://www.pdflib.com/
 BuildRequires:	autoconf
 BuildRequires:	automake
@@ -151,6 +152,7 @@ Dowiązania pythona dla pdflib.
 %patch4 -p1
 %patch5 -p1
 %patch6 -p1
+%patch7 -p1
 
 %build
 %{__libtoolize}
diff --git a/format-security.patch b/format-security.patch
new file mode 100644
index 0000000..13d0024
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,53 @@
+--- pdflib-4.0.3/pdflib/p_basic.c~	2002-06-19 18:01:15.000000000 +0200
++++ pdflib-4.0.3/pdflib/p_basic.c	2013-06-11 13:52:10.282606066 +0200
+@@ -308,7 +308,7 @@
+     switch (type) {
+ 	/* Issue a warning message and continue */
+ 	case PDF_NonfatalError:
+-	    (void) fprintf(stderr, msg);
++	    (void) fprintf(stderr, "%s", msg);
+ 	    return;
+ 
+ 	/* give up in all other cases */
+@@ -324,7 +324,7 @@
+ 	case PDF_SystemError:
+ 	case PDF_UnknownError:
+ 	default:
+-	    (void) fprintf(stderr, msg);	/* print message */
++	    (void) fprintf(stderr, "%s", msg);	/* print message */
+ 	    PDF_delete(p);			/* clean up PDFlib */
+ 	    exit(99);				/* good-bye */
+     }
+--- pdflib-4.0.3/bind/perl/pdflib_pl.c~	2002-01-21 20:56:32.000000000 +0100
++++ pdflib-4.0.3/bind/perl/pdflib_pl.c	2013-06-11 13:55:20.607974789 +0200
+@@ -407,7 +407,7 @@
+ 
+     /* Issue a warning message and continue for non-fatal errors */
+     if (type == PDF_NonfatalError) {
+-	fprintf(stderr, error_message);
++	fprintf(stderr, "%s", error_message);
+ 	return;
+     }
+ 	
+--- pdflib-4.0.3/bind/python/pdflib_py.c~	2002-01-07 19:26:29.000000000 +0100
++++ pdflib-4.0.3/bind/python/pdflib_py.c	2013-06-11 13:56:08.775156142 +0200
+@@ -578,7 +578,7 @@
+ 
+     /* Issue a warning message and continue for non-fatal errors */
+     if (type == PDF_NonfatalError) {
+-	fprintf(stderr, error_message);
++	fprintf(stderr, "%s", error_message);
+ 	return;
+     }
+ 	
+--- pdflib-4.0.3/bind/tcl/pdflib_tcl.c~	2002-01-07 19:26:29.000000000 +0100
++++ pdflib-4.0.3/bind/tcl/pdflib_tcl.c	2013-06-11 13:56:38.242137592 +0200
+@@ -397,7 +397,7 @@
+ 
+     /* Issue a warning message and continue for non-fatal errors */
+     if (type == PDF_NonfatalError) {
+-	fprintf(stderr, ex->buffer);
++	fprintf(stderr, "%s", ex->buffer);
+ 	return;
+     }
+ 	
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/pdflib.git/commitdiff/33ce2ce5a2048ecbceb246d6ede1541c42e79dd4



More information about the pld-cvs-commit mailing list