tags 666283 + patch
tags 666283 + pending
thanks

Dear maintainer,

I've prepared an NMU for proftpd-mod-msg (versioned as 0.4.1-1.1) and
uploaded it to DELAYED/2. Please feel free to tell me if I
should delay it longer.

Regards.

-- 
 .''`.  Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06
 : :' : Debian GNU/Linux user, admin, and developer  -  http://www.debian.org/
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: Fleetwood Mac: Oh Diane
diff -Nru proftpd-mod-msg-0.4.1/debian/changelog proftpd-mod-msg-0.4.1/debian/changelog
--- proftpd-mod-msg-0.4.1/debian/changelog	2011-10-11 12:52:48.000000000 +0200
+++ proftpd-mod-msg-0.4.1/debian/changelog	2012-04-15 14:07:17.000000000 +0200
@@ -1,3 +1,13 @@
+proftpd-mod-msg (0.4.1-1.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Fix "FTBFS: mod_msg.c:314:5: error: format not a string literal and
+    no format arguments [-Werror=format-security]": add patch
+    error-format-security.patch (add format strings).
+    (Closes: #666283)
+
+ -- gregor herrmann <gre...@debian.org>  Sun, 15 Apr 2012 14:06:55 +0200
+
 proftpd-mod-msg (0.4.1-1) unstable; urgency=low
 
   * Initial Release. (Closes: #623225)
diff -Nru proftpd-mod-msg-0.4.1/debian/patches/error-format-security.patch proftpd-mod-msg-0.4.1/debian/patches/error-format-security.patch
--- proftpd-mod-msg-0.4.1/debian/patches/error-format-security.patch	1970-01-01 01:00:00.000000000 +0100
+++ proftpd-mod-msg-0.4.1/debian/patches/error-format-security.patch	2012-04-15 14:05:06.000000000 +0200
@@ -0,0 +1,27 @@
+Description: add format strings
+Origin: vendor
+Bug-Debian: http://bugs.debian.org/666283
+Forwarded: no
+Author: gregor herrmann <gre...@debian.org>
+Last-Update: 2012-04-15
+
+--- a/mod_msg.c
++++ b/mod_msg.c
+@@ -311,7 +311,7 @@
+   /* Tack on any messages to this command. */
+   msgs = (char **) msg_pending_list->elts;
+   for (i = 0; i < msg_pending_list->nelts; i++)
+-    pr_response_add(R_DUP, msgs[i]);
++    pr_response_add(R_DUP, "%s", msgs[i]);
+ 
+   /* Clear the pending pool. */
+   destroy_pool(msg_pending_pool);
+@@ -343,7 +343,7 @@
+   /* Tack on any messages to this command. */
+   msgs = (char **) msg_pending_list->elts;
+   for (i = 0; i < msg_pending_list->nelts; i++)
+-    pr_response_add_err(R_DUP, msgs[i]);
++    pr_response_add_err(R_DUP, "%s", msgs[i]);
+ 
+   /* Clear the pending pool. */
+   destroy_pool(msg_pending_pool);
diff -Nru proftpd-mod-msg-0.4.1/debian/patches/series proftpd-mod-msg-0.4.1/debian/patches/series
--- proftpd-mod-msg-0.4.1/debian/patches/series	1970-01-01 01:00:00.000000000 +0100
+++ proftpd-mod-msg-0.4.1/debian/patches/series	2012-04-15 14:00:52.000000000 +0200
@@ -0,0 +1 @@
+error-format-security.patch

Attachment: signature.asc
Description: Digital signature

Reply via email to