format-security.patch

   1 --- dchub-0.5.2/extprog/ulist.c~        2003-05-06 18:57:16.000000000 +0200
   2 +++ dchub-0.5.2/extprog/ulist.c 2013-06-11 13:37:26.846548963 +0200
   3 @@ -363,22 +363,22 @@
   4                 xi->type=0;
   5                 xi->addr=g_string_new("");
   6                 if(addr!=NULL)
   7 -                       g_string_sprintf(xi->addr,addr);
   8 +                       g_string_sprintf(xi->addr,"%s",addr);
   9                 xi->client=g_string_new("");
  10                 if(client!=NULL)
  11 -                       g_string_sprintf(xi->client,client);
  12 +                       g_string_sprintf(xi->client,"%s",client);
  13                 xi->version=version;
  14                 xi->versionadd=g_string_new("");
  15                 if(versionadd!=NULL)
  16 -                       g_string_sprintf(xi->versionadd,versionadd);
  17 +                       g_string_sprintf(xi->versionadd,"%s",versionadd);
  18                 xi->locka=g_string_new("");
  19                 if(lock!=NULL)
  20 -                       g_string_sprintf(xi->locka,lock);
  21 +                       g_string_sprintf(xi->locka,"%s",lock);
  22                 xi->lockb=g_string_new("");
  23                 xi->lockc=g_string_new("");
  24                 xi->pka=g_string_new("");
  25                 if(pk!=NULL)
  26 -                       g_string_sprintf(xi->pka,pk);
  27 +                       g_string_sprintf(xi->pka,"%s",pk);
  28                 xi->pkb=g_string_new("");
  29                 xi->pkc=g_string_new("");
  30                 xi->has_bzlist=has_bzlist;
  31 @@ -397,11 +397,11 @@
  32                 xi->need_scan=3;
  33                 xi->d_client=g_string_new("");
  34                 if(d_client!=NULL)
  35 -                       g_string_sprintf(xi->d_client,d_client);
  36 +                       g_string_sprintf(xi->d_client,"%s",d_client);
  37                 xi->d_version=d_version;
  38                 xi->d_versionadd=g_string_new("");
  39                 if(d_versionadd!=NULL)
  40 -                       g_string_sprintf(xi->d_versionadd,d_versionadd);
  41 +                       g_string_sprintf(xi->d_versionadd,"%s",d_versionadd);
  42                 xi->lock_time=lock_time;
  43                 xi->last_call=time(NULL);
  44                 xi->warnmsg_send=FALSE;