Gentoo Archives: gentoo-commits

From: "Tony Vroon (chainsaw)" <chainsaw@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] gentoo-x86 commit in media-libs/libbs2b/files: 3.1.0-format-security.patch
Date: Fri, 06 Mar 2015 13:21:43
Message-Id: 20150306132139.333C4132A8@oystercatcher.gentoo.org
1 chainsaw 15/03/06 13:21:39
2
3 Added: 3.1.0-format-security.patch
4 Log:
5 Fix insecure printf statement in error path, as pointed out by Toralf Förster in bug #542138.
6
7 (Portage version: 2.2.17/cvs/Linux x86_64, signed Manifest commit with key 0xB5058F9A)
8
9 Revision Changes Path
10 1.1 media-libs/libbs2b/files/3.1.0-format-security.patch
11
12 file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-libs/libbs2b/files/3.1.0-format-security.patch?rev=1.1&view=markup
13 plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-libs/libbs2b/files/3.1.0-format-security.patch?rev=1.1&content-type=text/plain
14
15 Index: 3.1.0-format-security.patch
16 ===================================================================
17 --- src/bs2bconvert.c.orig 2015-03-06 12:24:00.168451618 +0000
18 +++ src/bs2bconvert.c 2015-03-06 12:22:20.504446655 +0000
19 @@ -153,7 +153,7 @@
20 if( ( infile = sf_open( infilename, SFM_READ, &sfinfo ) ) == NULL )
21 {
22 printf( "Not able to open input file %s.\n", infilename );
23 - printf( sf_strerror( NULL ) );
24 + printf( "%s", sf_strerror( NULL ) );
25 return 1;
26 }