[gentoo-commits] gentoo-x86 commit in x11-misc/viewglob/files: viewglob-2.0.4-format-security.patch

[Justin Lecher (jlec)]

jlec        15/02/24 08:52:54

  Added:                viewglob-2.0.4-format-security.patch
  Log:
  Fix for format-security, #541212
  
  (Portage version: 2.2.17/cvs/Linux x86_64, signed Manifest commit with key 
B9D4F231BD1558AB!)

Revision  Changes    Path
1.1                  
x11-misc/viewglob/files/viewglob-2.0.4-format-security.patch

file : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/x11-misc/viewglob/files/viewglob-2.0.4-format-security.patch?rev=1.1&view=markup
plain: 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/x11-misc/viewglob/files/viewglob-2.0.4-format-security.patch?rev=1.1&content-type=text/plain

Index: viewglob-2.0.4-format-security.patch
===================================================================
 common/syslogging.c | 2 +-
 vgseer/vgseer.c     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/common/syslogging.c b/common/syslogging.c
index dcb7106..df0b537 100644
--- a/common/syslogging.c
+++ b/common/syslogging.c
@@ -40,6 +40,6 @@ void syslogging(const gchar* log_domain, GLogLevelFlags 
log_level,
        else
                priority = LOG_NOTICE;
 
-       syslog(priority, message);
+       syslog(priority, "%s", message);
 }
 
diff --git a/vgseer/vgseer.c b/vgseer/vgseer.c
index e045835..18b0024 100644
--- a/vgseer/vgseer.c
+++ b/vgseer/vgseer.c
@@ -276,13 +276,13 @@ static gint connect_to_vgd(gchar* server, gchar* port,
        if (STREQ(value, "ERROR")) {
                /* Print reason for error and exit. */
                get_param_verify(fd, &param, &value, P_REASON, NULL);
-               g_critical(value);
+               g_critical("%s", value);
                clean_fail(NULL);
        }
        else if (STREQ(value, "WARNING")) {
                /* Print warning but continue. */
                get_param_verify(fd, &param, &value, P_REASON, NULL);
-               g_warning(value);
+               g_warning("%s", value);
        }
        else if (!STREQ(value, "OK")) {
                g_critical("Unknown value for P_STATUS: %s", value);