components/developer/gnu-cobol/patches/01-hardening-format-security.patch

   1 https://sources.debian.net/src/open-cobol/1.1-2/debian/patches/01_hardening-format-security.diff/
   2
   3 Index: open-cobol-1.1/cobc/codegen.c
   4 ===================================================================
   5 --- open-cobol-1.1.orig/cobc/codegen.c  2009-01-28 18:18:21.000000000 +0000
   6 +++ open-cobol-1.1/cobc/codegen.c       2012-05-09 06:21:19.000000000 +0000
   7 @@ -278,7 +278,7 @@
   8                 output_indent_level -= level;
   9         }
  10
  11 -       output_line (str);
  12 +       output_line ("%s", str);
  13
  14         if (*p == '{' && strcmp (str, ")}") != 0) {
  15                 output_indent_level += level;
  16 Index: open-cobol-1.1/cobc/error.c
  17 ===================================================================
  18 --- open-cobol-1.1.orig/cobc/error.c    2009-01-24 13:31:30.000000000 +0000
  19 +++ open-cobol-1.1/cobc/error.c 2012-05-09 06:21:19.000000000 +0000
  20 @@ -241,7 +241,7 @@
  21                                 break;
  22                         }
  23                         strcat (errnamebuff, _("defined here"));
  24 -                       cb_error_x (y, errnamebuff);
  25 +                       cb_error_x (y, "%s", errnamebuff);
  26                 }
  27         }
  28  }
  29 Index: open-cobol-1.1/cobc/typeck.c
  30 ===================================================================
  31 --- open-cobol-1.1.orig/cobc/typeck.c   2009-01-28 17:57:25.000000000 +0000
  32 +++ open-cobol-1.1/cobc/typeck.c        2012-05-09 06:21:19.000000000 +0000
  33 @@ -3907,11 +3907,11 @@
  34         loc = src->source_line ? src : dst;
  35         if (value_flag) {
  36                 /* VALUE clause */
  37 -               cb_warning_x (loc, msg);
  38 +               cb_warning_x (loc, "%s", msg);
  39         } else {
  40                 /* MOVE statement */
  41                 if (flag) {
  42 -                       cb_warning_x (loc, msg);
  43 +                       cb_warning_x (loc, "%s", msg);
  44                         if (src_flag) {
  45                                 warning_destination (src);
  46                         }