On Sat, Feb 03, Mike Gerber wrote: > confirmed for red hat linux 7.0: > > [kerouac:mg:~]m4 -G %x > m4: 80499d9: Datei oder Verzeichnis nicht gefunden > [kerouac:mg:~]cat /etc/redhat-release > Red Hat Linux release 7.0 (Guinness) > [kerouac:mg:~]rpm -q m4 > m4-1.4.1-3 I don't see this as a big problem, but here's a patch: --- m4-1.4/src/m4.c.orig Sat Feb 3 23:06:37 2001 +++ m4-1.4/src/m4.c Sat Feb 3 23:07:26 2001 @@ -369,7 +369,7 @@ case 'o': if (!debug_set_output (optarg)) - error (0, errno, optarg); + error (0, errno, "%s", optarg); break; case 's': @@ -466,7 +466,7 @@ fp = path_search (argv[optind]); if (fp == NULL) { - error (0, errno, argv[optind]); + error (0, errno, "%s", argv[optind]); continue; } else One thing I noticed: if your system doesn't have mkstemp/tmpfile m4 comes with its own implementation of tmpfile/mkstemp. This uses mktemp and open (w/out O_EXCL). -Jarno
- SuSe / Debian man package format string vulnerabilit... Joao Gouveia
- Re: SuSe / Debian man package format string vul... Roman Drahtmueller
- Re: SuSe / Debian man package format string vul... Tomasz Kuźniar
- m4 format string vulnerability [was: Re: Su... Mike Gerber
- Re: m4 format string vulnerability [was... Ivo van Poorten
- Re: SuSe / Debian man package format st... Jarno Huuskonen
- Re: SuSe / Debian man package format string vul... StyX
- Re: SuSe / Debian man package format string... Martin Schulze
- Re: SuSe / Debian man package format st... Jose Nazario
- Re: SuSe / Debian man package forma... Nate Eldredge
- Re: SuSe / Debian man package format st... Robert Bihlmeyer
- Re: SuSe / Debian man package format string... Robert van der Meulen
- Re: SuSe / Debian man package format st... Valdis Kletnieks
- Re: SuSe / Debian man package format st... Ethan Benson
- Re: SuSe / Debian man package format st... John
- Re: SuSe / Debian man package forma... Megyer Ur