Bug#643384: gfccore: FTBFS: error.cc:116:52: error: format not a string literal and no format arguments [-Werror=format-security]

[Eric Alexander]

tags 643384 +patch
thanks

Index: 643384/gfccore-2.3.1/gfc/glib/error.cc
===================================================================
--- 643384.orig/gfccore-2.3.1/gfc/glib/error.cc	2004-08-18 02:05:24.000000000 -0400
+++ 643384/gfccore-2.3.1/gfc/glib/error.cc	2011-11-11 18:48:30.126444867 -0500
@@ -113,7 +113,7 @@
 {
 	if (error_)
 		clear();
-	g_set_error(&error_, domain, code, message.c_str());
+	g_set_error(&error_, domain, code, "%s", message.c_str());
 }
 
 void
Index: 643384/gfccore-2.3.1/gfc/glib/markup.cc
===================================================================
--- 643384.orig/gfccore-2.3.1/gfc/glib/markup.cc	2004-08-18 02:05:16.000000000 -0400
+++ 643384/gfccore-2.3.1/gfc/glib/markup.cc	2011-11-11 18:50:25.602448477 -0500
@@ -79,7 +79,7 @@
 	G::Error tmp_error;
 	parser->on_start_element(tmp_context, tmp_element_name, attributes, tmp_error);
 	if (tmp_error.get())
-		g_set_error(error, tmp_error.domain(), tmp_error.code(), tmp_error.message());
+		g_set_error(error, tmp_error.domain(), tmp_error.code(), "%s", tmp_error.message());
 }
 
 void
@@ -92,7 +92,7 @@
 	G::Error tmp_error;
 	parser->on_end_element(tmp_context, tmp_element_name, tmp_error);
 	if (tmp_error.get())
-		g_set_error(error, tmp_error.domain(), tmp_error.code(), tmp_error.message());
+		g_set_error(error, tmp_error.domain(), tmp_error.code(), "%s", tmp_error.message());
 }
 
 void
@@ -105,7 +105,7 @@
 	G::Error tmp_error;
 	parser->on_text(tmp_context, tmp_text, tmp_error);
 	if (tmp_error.get())
-		g_set_error(error, tmp_error.domain(), tmp_error.code(), tmp_error.message());
+		g_set_error(error, tmp_error.domain(), tmp_error.code(), "%s", tmp_error.message());
 }
 
 void
@@ -118,7 +118,7 @@
 	G::Error tmp_error;
 	parser->on_passthrough(tmp_context, text, tmp_error);
 	if (tmp_error.get())
-		g_set_error(error, tmp_error.domain(), tmp_error.code(), tmp_error.message());
+		g_set_error(error, tmp_error.domain(), tmp_error.code(), "%s", tmp_error.message());
 }
 
 void