[packages/gnarwl] - fix format string error - rel 2

baggins baggins at pld-linux.org
Sat Aug 3 13:03:23 CEST 2013


commit 2b348735b1e1aaf0490278787eff0bad44b5254e
Author: Jan Rękorajski <baggins at pld-linux.org>
Date:   Sat Aug 3 13:03:13 2013 +0200

    - fix format string error
    - rel 2

 format-security.patch | 11 +++++++++++
 gnarwl.spec           |  4 +++-
 2 files changed, 14 insertions(+), 1 deletion(-)
---
diff --git a/gnarwl.spec b/gnarwl.spec
index f807c9e..a49495d 100644
--- a/gnarwl.spec
+++ b/gnarwl.spec
@@ -2,13 +2,14 @@ Summary:	Gnu Neat Auto Reply With LDAP
 Summary(pl.UTF-8):	Gnu Neat Auto Reply With LDAP - autoresponder korzystający z LDAP
 Name:		gnarwl
 Version:	3.6
-Release:	1
+Release:	2
 License:	GPL
 Group:		Applications/Mail
 Source0:	http://www.onyxbits.de/sites/default/files/%{name}-%{version}.tgz
 # Source0-md5:	832d1e2264b7e47d318b16795d63da8e
 Patch0:		%{name}-DESTDIR.patch
 Patch1:		%{name}-opt.patch
+Patch2:		format-security.patch
 URL:		http://www.onyxbits.de/gnarwl/
 BuildRequires:	autoconf
 BuildRequires:	gdbm-devel
@@ -59,6 +60,7 @@ Ten pakiet zawiera schemat LDAP ISPEnv2.schema do używania z gnarwlem.
 %setup -q
 %patch0 -p1
 %patch1 -p1
+%patch2 -p1
 
 %build
 %{__autoconf}
diff --git a/format-security.patch b/format-security.patch
new file mode 100644
index 0000000..92de565
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,11 @@
+--- gnarwl-3.6/src/mailhandler.c~	2008-06-24 22:23:33.000000000 +0200
++++ gnarwl-3.6/src/mailhandler.c	2013-08-03 13:02:20.793300785 +0200
+@@ -254,7 +254,7 @@
+   }
+   close(p[0]);
+   desc=fdopen(p[1],"w");
+-  fprintf(desc,body);
++  fprintf(desc,"%s",body);
+   fclose(desc);
+   
+   wait(NULL);
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/gnarwl.git/commitdiff/2b348735b1e1aaf0490278787eff0bad44b5254e



More information about the pld-cvs-commit mailing list