15-format-security.patch 426 B

123456789101112131415
  1. Author: Fabian Greffrath <fabian+debian@greffrath.com>
  2. Description: Fix format string vulnarability.
  3. --- unace-nonfree-2.5.orig/source/apps/exe/output/output.c
  4. +++ unace-nonfree-2.5/source/apps/exe/output/output.c
  5. @@ -125,7 +125,7 @@ CHAR DeleteStr[223];
  6. memset(&DeleteStr[74], ' ', 74);
  7. DeleteStr[222] = 0;
  8. - printf(DeleteStr);
  9. + printf("%s", DeleteStr);
  10. #ifndef __sun__
  11. fflush(stdout);
  12. #endif