format-security.patch

   1 --- libreport-2.3.0/src/plugins/reporter-ureport.c.orig 2014-10-12 21:30:27.836212240 +0200
   2 +++ libreport-2.3.0/src/plugins/reporter-ureport.c      2014-10-12 21:42:03.026183064 +0200
   3 @@ -246,7 +246,7 @@
   4          {
   5              log(_("This problem has already been reported."));
   6              if (response->urr_message)
   7 -                log(response->urr_message);
   8 +                log("%s", response->urr_message);
   9
  10              ret = EXIT_STOP_EVENT_RUN;
  11          }
  12 --- libreport-2.2.2/src/gui-wizard-gtk/wizard.c.orig    2014-04-20 22:07:04.000000000 +0200
  13 +++ libreport-2.2.2/src/gui-wizard-gtk/wizard.c 2014-06-14 17:08:36.638269706 +0200
  14 @@ -1935,7 +1935,7 @@
  15          GTK_DIALOG_MODAL | GTK_DIALOG_DESTROY_WITH_PARENT,
  16          GTK_MESSAGE_WARNING,
  17          GTK_BUTTONS_YES_NO,
  18 -        message);
  19 +        "%s", message);
  20
  21      gtk_window_set_transient_for(GTK_WINDOW(old_private_group), GTK_WINDOW(g_wnd_assistant));
  22      gtk_message_dialog_set_markup(GTK_MESSAGE_DIALOG(old_private_group),
  23 @@ -3118,7 +3118,7 @@
  24                  GTK_DIALOG_MODAL | GTK_DIALOG_DESTROY_WITH_PARENT,
  25                  GTK_MESSAGE_WARNING,
  26                  GTK_BUTTONS_CLOSE,
  27 -                message);
  28 +                "%s", message);
  29              free(message);
  30              gtk_window_set_transient_for(GTK_WINDOW(dlg), GTK_WINDOW(g_wnd_assistant));
  31              gtk_dialog_run(GTK_DIALOG(dlg));
  32 --- libreport-2.3.0/src/plugins/reporter-rhtsupport.c.orig      2014-10-02 10:51:43.000000000 +0200
  33 +++ libreport-2.3.0/src/plugins/reporter-rhtsupport.c   2014-10-12 21:46:04.766172924 +0200
  34 @@ -205,7 +205,7 @@
  35          ureport_server_response_save_in_dump_dir(resp, dump_dir_name, conf);
  36
  37          if (resp->urr_message)
  38 -            log(resp->urr_message);
  39 +            log("%s", resp->urr_message);
  40      }
  41      else if (g_verbose > 2)
  42          error_msg(_("Server responded with an error: '%s'"), resp->urr_value);