format-security.patch

   1 --- libreport-2.7.0/src/plugins/reporter-ureport.c~     2016-04-07 18:24:05.000000000 +0300
   2 +++ libreport-2.7.0/src/plugins/reporter-ureport.c      2016-04-27 10:31:21.566593068 +0300
   3 @@ -312,7 +312,7 @@
   4          {
   5              log(_("This problem has already been reported."));
   6              if (response->urr_message)
   7 -                log(response->urr_message);
   8 +                log("%s", response->urr_message);
   9
  10              ret = EXIT_STOP_EVENT_RUN;
  11          }
  12 --- libreport-2.7.0/src/gui-wizard-gtk/wizard.c~        2016-04-07 18:24:05.000000000 +0300
  13 +++ libreport-2.7.0/src/gui-wizard-gtk/wizard.c 2016-04-27 10:39:33.488656568 +0300
  14 @@ -3352,7 +3352,7 @@
  15                  GTK_DIALOG_MODAL | GTK_DIALOG_DESTROY_WITH_PARENT,
  16                  GTK_MESSAGE_WARNING,
  17                  GTK_BUTTONS_CLOSE,
  18 -                message);
  19 +                "%s", message);
  20              free(message);
  21              gtk_window_set_transient_for(GTK_WINDOW(dlg), GTK_WINDOW(g_wnd_assistant));
  22              gtk_dialog_run(GTK_DIALOG(dlg));
  23 --- libreport-2.7.0/src/plugins/reporter-rhtsupport.c~  2016-04-07 18:24:05.000000000 +0300
  24 +++ libreport-2.7.0/src/plugins/reporter-rhtsupport.c   2016-04-27 10:35:22.815716392 +0300
  25 @@ -288,7 +288,7 @@
  26          ureport_server_response_save_in_dump_dir(resp, dump_dir_name, conf);
  27
  28          if (resp->urr_message)
  29 -            log(resp->urr_message);
  30 +            log("%s", resp->urr_message);
  31      }
  32      else if (g_verbose > 2)
  33          error_msg(_("Server responded with an error: '%s'"), resp->urr_value);