a2ps/repos/extra-x86_64/CVE-2015-8107.patch

   1 From 90b876cb480ca9e092490c825663f23909c6173c Mon Sep 17 00:00:00 2001
   2 From: David Seifert <soap@gentoo.org>
   3 Date: Sun, 17 Sep 2017 23:31:56 +0200
   4 Subject: Add fix for CVE-2015-8107
   5
   6 ---
   7  lib/output.c   | 2 +-
   8  lib/parseppd.y | 2 +-
   9  lib/psgen.c    | 2 +-
  10  src/parsessh.y     | 2 +-
  11  4 files changed, 4 insertions(+), 4 deletions(-)
  12
  13 diff --git a/lib/output.c b/lib/output.c
  14 index b0011e1..449df0c 100644
  15 --- a/lib/output.c
  16 +++ b/lib/output.c
  17 @@ -518,7 +518,7 @@ output_file (struct output * out, a2ps_job * job,
  18                      expand_user_string (job, FIRST_FILE (job),
  19                                          (const uchar *) "Expand: requirement",
  20                                          (const uchar *) token));
  21 -       output (dest, expansion);
  22 +       output (dest, "%s", expansion);
  23         continue;
  24        }
  25
  26 diff --git a/lib/parseppd.y b/lib/parseppd.y
  27 index cb393e2..6e50ecb 100644
  28 --- a/lib/parseppd.y
  29 +++ b/lib/parseppd.y
  30 @@ -156,7 +156,7 @@ font_clause :
  31  void
  32  yyerror (const char *msg)
  33  {
  34 -  error_at_line (1, 0, ppdfilename, ppdlineno, msg);
  35 +  error_at_line (1, 0, ppdfilename, ppdlineno, "%s", msg);
  36  }
  37
  38  /*
  39 diff --git a/lib/psgen.c b/lib/psgen.c
  40 index 8738512..1cc3513 100644
  41 --- a/lib/psgen.c
  42 +++ b/lib/psgen.c
  43 @@ -221,7 +221,7 @@ output_marker (a2ps_job * job, const char * kind, unsigned char * marker)
  44      default:
  45        *buf = '\0';
  46        ps_escape_char (job, cp[i], buf);
  47 -      output (jdiv, (char *) buf);
  48 +      output (jdiv, "%s", (char *) buf);
  49        break;
  50      }
  51    }
  52 diff --git a/src/parsessh.y b/src/parsessh.y
  53 index 78d2039..b301d87 100644
  54 --- a/src/parsessh.y
  55 +++ b/src/parsessh.y
  56 @@ -742,7 +742,7 @@ exception_def_opt:
  57  void
  58  yyerror (const char *msg)
  59  {
  60 -  error_at_line (1, 0, sshfilename, sshlineno, msg);
  61 +  error_at_line (1, 0, sshfilename, sshlineno, "%s", msg);
  62  }
  63
  64  /*
  65 --
  66 cgit v1.2.1
  67