format-security.patch

   1 --- libreport-2.1.5/src/plugins/ureport.c.orig  2013-07-25 15:39:39.289878178 +0200
   2 +++ libreport-2.1.5/src/plugins/ureport.c       2013-07-25 15:42:58.916536467 +0200
   3 @@ -476,7 +476,7 @@
   4          {
   5              log(_("This problem has already been reported."));
   6              if (response->message)
   7 -                log(response->message);
   8 +                log("%s", response->message);
   9
  10              ret = EXIT_STOP_EVENT_RUN;
  11          }
  12 --- libreport-2.0.16/src/gui-wizard-gtk/wizard.c~       2012-10-10 18:11:04.000000000 +0200
  13 +++ libreport-2.0.16/src/gui-wizard-gtk/wizard.c        2012-10-15 12:55:58.123197354 +0200
  14 @@ -281,7 +281,7 @@
  15          GTK_DIALOG_MODAL | GTK_DIALOG_DESTROY_WITH_PARENT,
  16          GTK_MESSAGE_WARNING,
  17          GTK_BUTTONS_CLOSE,
  18 -        message);
  19 +        "%s", message);
  20
  21      gtk_window_set_transient_for(GTK_WINDOW(wrong_settings), GTK_WINDOW(g_wnd_assistant));
  22      gtk_message_dialog_set_markup(GTK_MESSAGE_DIALOG(wrong_settings),
  23 @@ -2753,7 +2753,7 @@
  24                  GTK_DIALOG_MODAL | GTK_DIALOG_DESTROY_WITH_PARENT,
  25                  GTK_MESSAGE_WARNING,
  26                  GTK_BUTTONS_CLOSE,
  27 -                message);
  28 +                "%s", message);
  29              free(message);
  30              gtk_window_set_transient_for(GTK_WINDOW(dlg), GTK_WINDOW(g_wnd_assistant));
  31              gtk_dialog_run(GTK_DIALOG(dlg));