chainsaw 14/10/08 08:22:01 Added: vorbis-tools-1.4.0-format-security.patch Log: Patch by "unlord" from xiph.org to address a format security issue, closes bug #520580 by Agostino "ago" Sarubbo. (Portage version: 2.2.14_rc1/cvs/Linux x86_64, signed Manifest commit with key 0xB5058F9A)
Revision Changes Path 1.1 media-sound/vorbis-tools/files/vorbis-tools-1.4.0-format-security.patch file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-format-security.patch?rev=1.1&view=markup plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-sound/vorbis-tools/files/vorbis-tools-1.4.0-format-security.patch?rev=1.1&content-type=text/plain Index: vorbis-tools-1.4.0-format-security.patch =================================================================== --- vorbis-tools-1.4.0.orig/ogg123/status.c +++ vorbis-tools-1.4.0/ogg123/status.c @@ -148,7 +148,7 @@ switch (stats->type) { case stat_noarg: - len += sprintf(str+len, stats->formatstr); + len += sprintf(str+len, "%s", stats->formatstr); break; case stat_intarg: len += sprintf(str+len, stats->formatstr, stats->arg.intarg);
