[packages/libf2c] - fix format string errors - rel 2

baggins baggins at pld-linux.org
Sun Apr 5 19:34:43 CEST 2015


commit 3f8701942c729f9d69d998937542a8eeca56e9ea
Author: Jan Rękorajski <baggins at pld-linux.org>
Date:   Sun Apr 5 17:34:26 2015 +0000

    - fix format string errors
    - rel 2

 format-security.patch | 11 +++++++++++
 libf2c.spec           |  4 +++-
 2 files changed, 14 insertions(+), 1 deletion(-)
---
diff --git a/libf2c.spec b/libf2c.spec
index db132d1..08682c7 100644
--- a/libf2c.spec
+++ b/libf2c.spec
@@ -2,7 +2,7 @@ Summary:	Fortran to C conversion support library
 Summary(pl.UTF-8):	Biblioteka wspierająca tłumaczenie z Fortranu na C
 Name:		libf2c
 Version:	20110801
-Release:	1
+Release:	2
 License:	distributable
 Group:		Libraries
 Source0:	http://www.netlib.org/f2c/libf2c.zip
@@ -10,6 +10,7 @@ Source0:	http://www.netlib.org/f2c/libf2c.zip
 Patch0:		%{name}-LP64.patch
 Patch1:		%{name}-opt.patch
 Patch2:		%{name}-nomacros.patch
+Patch3:		format-security.patch
 URL:		http://www.netlib.org/f2c/
 BuildRequires:	unzip
 Conflicts:	f2c < 20031027-2
@@ -51,6 +52,7 @@ Statyczna biblioteka f2c.
 %patch0 -p1
 %patch1 -p1
 %patch2 -p1
+%patch3 -p1
 
 %build
 %{__make} -f makefile.u \
diff --git a/format-security.patch b/format-security.patch
new file mode 100644
index 0000000..fef7371
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,11 @@
+--- libf2c-20110801/arithchk.c~	2011-01-27 16:24:09.000000000 +0000
++++ libf2c-20110801/arithchk.c	2015-04-05 17:33:07.396796153 +0000
+@@ -122,7 +122,7 @@
+ 	long Cray1;
+ 
+ 	/* Cray1 = 4617762693716115456 -- without overflow on non-Crays */
+-	Cray1 = printf(emptyfmt) < 0 ? 0 : 4617762;
++	Cray1 = printf("%s", emptyfmt) < 0 ? 0 : 4617762;
+ 	if (printf(emptyfmt, Cray1) >= 0)
+ 		Cray1 = 1000000*Cray1 + 693716;
+ 	if (printf(emptyfmt, Cray1) >= 0)
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/libf2c.git/commitdiff/3f8701942c729f9d69d998937542a8eeca56e9ea



More information about the pld-cvs-commit mailing list