format-security.patch

   1 --- XmHTML-1.1.7/lib/common/parse.c.orig        1999-01-20 06:13:08.000000000 +0100
   2 +++ XmHTML-1.1.7/lib/common/parse.c     2013-11-06 22:11:19.395801941 +0100
   3 @@ -1935,7 +1935,7 @@
   4                         sprintf(msg, XMHTML_MSG_128, html_tokens[id], html_tokens[current]);
   5                         break;
   6                 case HTML_INTERNAL:
   7 -                       sprintf(msg, XMHTML_MSG_129);
   8 +                       sprintf(msg, "%s", XMHTML_MSG_129);
   9                         break;
  10                 case HTML_NOTIFY:       /* not reached */
  11                         return;