[packages/lynx] - fix format string errors

baggins baggins at pld-linux.org
Thu Jan 1 19:22:05 CET 2015


commit 4d335f54885584a89a77405dc07422bbb05b4a86
Author: Jan Rękorajski <baggins at pld-linux.org>
Date:   Thu Jan 1 18:21:55 2015 +0000

    - fix format string errors

 format-security.patch | 20 ++++++++++++++++++++
 lynx.spec             |  2 ++
 2 files changed, 22 insertions(+)
---
diff --git a/lynx.spec b/lynx.spec
index ed2d973..3cc663e 100644
--- a/lynx.spec
+++ b/lynx.spec
@@ -29,6 +29,7 @@ Patch5:		%{name}-config.patch
 Patch6:		%{name}-acfix.patch
 Patch7:		%{name}-gzip_fallback.patch
 Patch8:		%{name}-etc_dir.patch
+Patch9:		format-security.patch
 URL:		http://lynx.browser.org/
 BuildRequires:	autoconf
 BuildRequires:	automake
@@ -99,6 +100,7 @@ formlar ve tablolar için desteği vardır.
 %patch6 -p1
 %patch7 -p1
 %patch8 -p1
+%patch9 -p1
 
 %build
 cp /usr/share/automake/config.sub .
diff --git a/format-security.patch b/format-security.patch
new file mode 100644
index 0000000..d9fe76c
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,20 @@
+--- lynx2-8-7/src/HTML.c~	2009-06-23 23:53:58.000000000 +0000
++++ lynx2-8-7/src/HTML.c	2015-01-01 18:21:04.617496824 +0000
+@@ -2716,13 +2716,13 @@
+ 		    }
+ 		}
+ 		if (seqtype == 'A') {
+-		    sprintf(number_string, LYUppercaseA_OL_String(seqnum));
++		    sprintf(number_string, "%s", LYUppercaseA_OL_String(seqnum));
+ 		} else if (seqtype == 'a') {
+-		    sprintf(number_string, LYLowercaseA_OL_String(seqnum));
++		    sprintf(number_string, "%s", LYLowercaseA_OL_String(seqnum));
+ 		} else if (seqtype == 'I') {
+-		    sprintf(number_string, LYUppercaseI_OL_String(seqnum));
++		    sprintf(number_string, "%s", LYUppercaseI_OL_String(seqnum));
+ 		} else if (seqtype == 'i') {
+-		    sprintf(number_string, LYLowercaseI_OL_String(seqnum));
++		    sprintf(number_string, "%s", LYLowercaseI_OL_String(seqnum));
+ 		} else {
+ 		    sprintf(number_string, "%2d.", seqnum);
+ 		}
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/lynx.git/commitdiff/4d335f54885584a89a77405dc07422bbb05b4a86



More information about the pld-cvs-commit mailing list