commit 4d335f54885584a89a77405dc07422bbb05b4a86
Author: Jan Rękorajski <[email protected]>
Date:   Thu Jan 1 18:21:55 2015 +0000

    - fix format string errors

 format-security.patch | 20 ++++++++++++++++++++
 lynx.spec             |  2 ++
 2 files changed, 22 insertions(+)
---
diff --git a/lynx.spec b/lynx.spec
index ed2d973..3cc663e 100644
--- a/lynx.spec
+++ b/lynx.spec
@@ -29,6 +29,7 @@ Patch5:               %{name}-config.patch
 Patch6:                %{name}-acfix.patch
 Patch7:                %{name}-gzip_fallback.patch
 Patch8:                %{name}-etc_dir.patch
+Patch9:                format-security.patch
 URL:           http://lynx.browser.org/
 BuildRequires: autoconf
 BuildRequires: automake
@@ -99,6 +100,7 @@ formlar ve tablolar için desteği vardır.
 %patch6 -p1
 %patch7 -p1
 %patch8 -p1
+%patch9 -p1
 
 %build
 cp /usr/share/automake/config.sub .
diff --git a/format-security.patch b/format-security.patch
new file mode 100644
index 0000000..d9fe76c
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,20 @@
+--- lynx2-8-7/src/HTML.c~      2009-06-23 23:53:58.000000000 +0000
++++ lynx2-8-7/src/HTML.c       2015-01-01 18:21:04.617496824 +0000
+@@ -2716,13 +2716,13 @@
+                   }
+               }
+               if (seqtype == 'A') {
+-                  sprintf(number_string, LYUppercaseA_OL_String(seqnum));
++                  sprintf(number_string, "%s", 
LYUppercaseA_OL_String(seqnum));
+               } else if (seqtype == 'a') {
+-                  sprintf(number_string, LYLowercaseA_OL_String(seqnum));
++                  sprintf(number_string, "%s", 
LYLowercaseA_OL_String(seqnum));
+               } else if (seqtype == 'I') {
+-                  sprintf(number_string, LYUppercaseI_OL_String(seqnum));
++                  sprintf(number_string, "%s", 
LYUppercaseI_OL_String(seqnum));
+               } else if (seqtype == 'i') {
+-                  sprintf(number_string, LYLowercaseI_OL_String(seqnum));
++                  sprintf(number_string, "%s", 
LYLowercaseI_OL_String(seqnum));
+               } else {
+                   sprintf(number_string, "%2d.", seqnum);
+               }
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/lynx.git/commitdiff/4d335f54885584a89a77405dc07422bbb05b4a86

_______________________________________________
pld-cvs-commit mailing list
[email protected]
http://lists.pld-linux.org/mailman/listinfo/pld-cvs-commit

Reply via email to