[packages/libgii] - fix format string errors - rel 5

baggins baggins at pld-linux.org
Sat Dec 7 16:26:23 CET 2013


commit 837a21b554f9af690909f90df2dc5a041f143b05
Author: Jan Rękorajski <baggins at pld-linux.org>
Date:   Sat Dec 7 16:26:11 2013 +0100

    - fix format string errors
    - rel 5

 format-security.patch | 28 ++++++++++++++++++++++++++++
 libgii.spec           |  4 +++-
 2 files changed, 31 insertions(+), 1 deletion(-)
---
diff --git a/libgii.spec b/libgii.spec
index ea47aae..27b658e 100644
--- a/libgii.spec
+++ b/libgii.spec
@@ -7,11 +7,12 @@ Summary:	General Input Interface library fo LibGGI
 Summary(pl.UTF-8):	Biblioteka do obsługi urządzeń wejściowych dla GGI
 Name:		libgii
 Version:	1.0.2
-Release:	4
+Release:	5
 License:	BSD-like
 Group:		Libraries
 Source0:	http://www.ggi-project.org/ftp/ggi/v2.2/%{name}-%{version}.src.tar.bz2
 # Source0-md5:	e002b3b3b7fae2b2558fe7ac854359b7
+Patch0:		format-security.patch
 URL:		http://www.ggi-project.org/
 BuildRequires:	autoconf >= 2.59-9
 BuildRequires:	automake >= 1.4
@@ -76,6 +77,7 @@ Biblioteka statyczna LibGII.
 
 %prep
 %setup -q
+%patch0 -p1
 
 %{__rm} acinclude.m4 m4/lt*.m4
 
diff --git a/format-security.patch b/format-security.patch
new file mode 100644
index 0000000..e4566c1
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,28 @@
+--- libgii-1.0.2/input/linux_mouse/input.c~	2005-08-05 18:13:47.000000000 +0200
++++ libgii-1.0.2/input/linux_mouse/input.c	2013-12-07 16:23:58.619542180 +0100
+@@ -251,7 +251,7 @@
+ 				"        device may not work as expected\n");
+ #endif /* HAVE_TIOCMSET */
+ 		}
+-		if (dowarn) fprintf(stderr, serialfailstr);
++		if (dowarn) fprintf(stderr, "%s", serialfailstr);
+ 	}
+ 
+ 	return 0;
+--- libgii-1.0.2/input/lk201/input.c~	2005-08-04 14:43:29.000000000 +0200
++++ libgii-1.0.2/input/lk201/input.c	2013-12-07 16:24:44.549541848 +0100
+@@ -256,12 +256,12 @@
+ 		}
+ 		else 
+ 		{
+-			fprintf(stderr, tcsetattrfailstr);
++			fprintf(stderr, "%s", tcsetattrfailstr);
+ 		}
+ 	} 
+ 	else 
+ 	{
+-		fprintf(stderr, tcgetattrfailstr);
++		fprintf(stderr, "%s", tcgetattrfailstr);
+ 	}
+ 	
+ 	/* dump and characters currently in the buffer */
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/libgii.git/commitdiff/837a21b554f9af690909f90df2dc5a041f143b05



More information about the pld-cvs-commit mailing list