On Sep 22, 2009, at 9:46 AM, Don Armstrong wrote:

Attached please find the trivial patch for this security fix.

snprintf, not sprintf:

-         sprintf(errbuf, "flag '%s': not a valid relational operation", r);
+ sprintf(errbuf, sizeof(errbuf), "flag '%s': not a valid relational operation", r);




--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to