pork/trunk/fix-format-security.patch

   1 diff -upr pork-0.99.8.1.orig/src/pork_command.c pork-0.99.8.1/src/pork_command.c
   2 --- pork-0.99.8.1.orig/src/pork_command.c       2005-04-28 20:35:19.000000000 +0300
   3 +++ pork-0.99.8.1/src/pork_command.c    2022-05-30 18:37:37.732536640 +0300
   4 @@ -2124,7 +2124,7 @@ USER_COMMAND(cmd_ctcp) {
   5
   6  USER_COMMAND(cmd_echo) {
   7         if (args != NULL)
   8 -               screen_win_msg(cur_window(), 0, 0, 1, MSG_TYPE_CMD_OUTPUT, args);
   9 +               screen_win_msg(cur_window(), 0, 0, 1, MSG_TYPE_CMD_OUTPUT, "%s", args);
  10  }
  11
  12  USER_COMMAND(cmd_disconnect) {
  13 diff -upr pork-0.99.8.1.orig/src/pork_perl_xs.c pork-0.99.8.1/src/pork_perl_xs.c
  14 --- pork-0.99.8.1.orig/src/pork_perl_xs.c       2005-04-29 03:43:53.000000000 +0300
  15 +++ pork-0.99.8.1/src/pork_perl_xs.c    2022-05-30 19:39:23.523379048 +0300
  16 @@ -289,7 +289,7 @@ XS(PORK_echo) {
  17                 XSRETURN_IV(-1);
  18
  19         msg = SvPV(ST(0), notused);
  20 -       screen_win_msg(cur_window(), 0, 0, 1, MSG_TYPE_CMD_OUTPUT, msg);
  21 +       screen_win_msg(cur_window(), 0, 0, 1, MSG_TYPE_CMD_OUTPUT, "%s", msg);
  22         XSRETURN_IV(0);
  23  }
  24