- fix format string error

- rel 5

diff --git a/barcode.spec b/barcode.spec
index 125f90b10a7f2d9956516a7a19f22910b5caa05d..436a2250874c8feb45b77a12a243f403be4bb3ec 100644 (file)
--- a/barcode.spec
+++ b/barcode.spec
@@ -2,12 +2,13 @@ Summary:      GNU barcode
 Summary(pl.UTF-8):     GNU barcode - narzędzie do kodów paskowych
 Name:          barcode
 Version:       0.98
-Release:       4
+Release:       5
 License:       GPL
 Group:         Applications/Graphics
 Source0:       http://ftp.gnu.org/gnu/barcode/%{name}-%{version}.tar.gz
 # Source0-md5: 7f10c3307b84a19a4ab2fa4b3f2974da
 Patch0:                %{name}-DESTDIR.patch
+Patch1:                format-security.patch
 URL:           http://www.gnu.org/software/barcode/
 BuildRequires: autoconf
 BuildRequires: automake
@@ -60,6 +61,7 @@ stronę manuala do tworzenia programów używających GNU barcode.
 %prep
 %setup -q
 %patch0 -p1
+%patch1 -p1
 
 %build
 %{__aclocal}

diff --git a/format-security.patch b/format-security.patch
new file mode 100644 (file)
index 0000000..7fae99e
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,11 @@
+--- barcode-0.98/plessey.c~    2000-11-07 17:43:18.000000000 +0000
++++ barcode-0.98/plessey.c     2015-04-05 20:20:57.170658797 +0000
+@@ -148,7 +148,7 @@
+                         checkptr[i+j] ^= check[j];
+     }
+     for (i = 0; i < 8; i++) {
+-        sprintf(ptr, patterns[checkptr[strlen(text) * 4 + i]]);
++        sprintf(ptr, "%s", patterns[checkptr[strlen(text) * 4 + i]]);
+       ptr += 2;
+     }
+     fprintf(stderr, "CRC: ");