format-security.patch

   1 --- freeradius-server-2.2.0/src/modules/rlm_ruby/rlm_ruby.c~    2012-12-07 08:22:05.957883039 +0100
   2 +++ freeradius-server-2.2.0/src/modules/rlm_ruby/rlm_ruby.c     2012-12-07 08:27:18.491205348 +0100
   3 @@ -91,7 +91,7 @@
   4      char *msg;
   5      status = FIX2INT(msg_type);
   6      msg = STR2CSTR(rb_msg);
   7 -    radlog(status, msg);
   8 +    radlog(status, "%s", msg);
   9      return Qnil;
  10  }
  11
  12 --- freeradius-server-2.2.5.orig/src/main/radclient.c   2014-04-28 19:13:08.000000000 +0000
  13 +++ freeradius-server-2.2.5/src/main/radclient.c        2014-06-11 16:34:16.990041774 +0000
  14 @@ -934,7 +934,7 @@
  15                         timeout = atof(optarg);
  16                         break;
  17                 case 'v':
  18 -                       printf(radclient_version);
  19 +                       printf("%s", radclient_version);
  20                         exit(0);
  21                         break;
  22                 case 'x':
  23 --- freeradius-server-2.2.6/src/modules/rlm_sql/drivers/rlm_sql_oracle/sql_oracle.c.orig        2014-11-18 20:56:52.000000000 +0100
  24 +++ freeradius-server-2.2.6/src/modules/rlm_sql/drivers/rlm_sql_oracle/sql_oracle.c     2015-03-22 07:30:08.669953101 +0100
  25 @@ -242,7 +242,7 @@
  26         rlm_sql_oracle_sock *oracle_sock = sqlsocket->conn;
  27
  28         if (config->sqltrace)
  29 -               DEBUG(querystr);
  30 +               DEBUG("%s", querystr);
  31         if (oracle_sock->conn == NULL) {
  32                 radlog(L_ERR, "rlm_sql_oracle: Socket not connected");
  33                 return SQL_DOWN;
  34 @@ -300,7 +300,7 @@
  35         rlm_sql_oracle_sock *oracle_sock = sqlsocket->conn;
  36
  37         if (config->sqltrace)
  38 -               DEBUG(querystr);
  39 +               DEBUG("%s", querystr);
  40         if (oracle_sock->conn == NULL) {
  41                 radlog(L_ERR, "rlm_sql_oracle: Socket not connected");
  42                 return SQL_DOWN;