jlec        15/03/12 10:12:18

  Added:                rasmol-2.7.5.2-format-security.patch
                        rasmol-2.7.5.2-longlong.patch
  Log:
  Fix for format-security, #543032
  
  (Portage version: 2.2.18/cvs/Linux x86_64, signed Manifest commit with key 
B9D4F231BD1558AB!)

Revision  Changes    Path
1.1                  
sci-chemistry/rasmol/files/rasmol-2.7.5.2-format-security.patch

file : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sci-chemistry/rasmol/files/rasmol-2.7.5.2-format-security.patch?rev=1.1&view=markup
plain: 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sci-chemistry/rasmol/files/rasmol-2.7.5.2-format-security.patch?rev=1.1&content-type=text/plain

Index: rasmol-2.7.5.2-format-security.patch
===================================================================
diff -urp RasMol-2.7.5.2/src/command.c RasMol-2.7.5.2_sprintf/src/command.c
--- RasMol-2.7.5.2/src/command.c        2011-05-15 01:23:49.000000000 +0700
+++ RasMol-2.7.5.2_sprintf/src/command.c        2014-02-12 18:02:24.633489549 
+0700
@@ -1286,7 +1286,7 @@ void ShowRecordCommand( void ) {
         if (record_on[1]) WriteString("record appearance on\n");
         else WriteString("record apperance off\n");
         if (RecordMaxMS == 1.) {
-            sprintf(param,RecordTemplate);
+            sprintf(param, "%s", RecordTemplate);
         } else{
             sprintf(param,RecordTemplate,millisec<0?0:millisec);
         }
@@ -1381,7 +1381,7 @@ void ShowPlayCommand( void ) {
             WriteString(param);
         }
         if (PlayMaxMS == 1.) {
-            sprintf(param,PlayTemplate);
+            sprintf(param, "%s", PlayTemplate);
         } else{
             sprintf(param,PlayTemplate,millisec<0?0:millisec);
         }
@@ -1469,7 +1469,7 @@ void WriteMovieFrame( void ) {
         RecordPause = True;
     } else {
         if (RecordMaxMS == 1.) {
-          sprintf(param,RecordTemplate);
+          sprintf(param, "%s", RecordTemplate);
         } else{
           sprintf(param,RecordTemplate,millisec);
         }
@@ -1505,7 +1505,7 @@ static int PlayMovieFrame( void ) {
         for (play_frame[1] = 0;play_frame[1]<=millisec; play_frame[1]++) 
         {
             if (RecordMaxMS == 1.) {
-                sprintf(param,PlayTemplate);
+                sprintf(param, "%s", PlayTemplate);
             } else{
                 sprintf(param,PlayTemplate,millisec-play_frame[1]);
             }



1.1                  sci-chemistry/rasmol/files/rasmol-2.7.5.2-longlong.patch

file : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sci-chemistry/rasmol/files/rasmol-2.7.5.2-longlong.patch?rev=1.1&view=markup
plain: 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sci-chemistry/rasmol/files/rasmol-2.7.5.2-longlong.patch?rev=1.1&content-type=text/plain

Index: rasmol-2.7.5.2-longlong.patch
===================================================================
diff -urp rasmol-2.7.5-23Jul09/src/rasmol.h 
rasmol-2.7.5-23Jul09-64b/src/rasmol.h
--- rasmol-2.7.5-23Jul09/src/rasmol.h   2009-07-20 21:08:43.000000000 +0700
+++ rasmol-2.7.5-23Jul09-64b/src/rasmol.h       2013-02-22 14:40:00.378574163 
+0700
@@ -125,6 +125,8 @@
 #define VECTOR_FAR 
 #endif
 
+#define _LONGLONG
+
 /*========================*/
 /*  Default User Options! */
 /*========================*/




Reply via email to