- fix format string errors

- rel 3

diff --git a/detox.spec b/detox.spec
index 97fc241bed87d7fd6a6e0d9348f9d5c7267ad3ea..163e5aa2014d1e65d5ca66749a23f56ed95ffe61 100644 (file)
--- a/detox.spec
+++ b/detox.spec
@@ -4,11 +4,12 @@
 Summary:       Utility designed to clean up filenames
 Name:          detox
 Version:       1.2.0
-Release:       2
+Release:       3
 License:       BSD-like
 Group:         Applications
 Source0:       http://downloads.sourceforge.net/detox/%{name}-%{version}.tar.gz
 # Source0-md5: 04f1bc8501cd40c21610ea3fee7a6fc5
+Patch0:                format-security.patch
 URL:           http://detox.sourceforge.net/
 #BuildRequires:        -
 BuildRoot:     %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
@@ -21,6 +22,7 @@ equivalents.
 
 %prep
 %setup -q
+%patch0 -p1
 
 %build
 %configure

diff --git a/format-security.patch b/format-security.patch
new file mode 100644 (file)
index 0000000..7918c61
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,32 @@
+--- detox-1.2.0/parse_options_getopt.c~        2006-07-03 18:45:54.000000000 +0200
++++ detox-1.2.0/parse_options_getopt.c 2015-09-24 23:02:33.218616787 +0200
+@@ -98,9 +98,9 @@
+ #endif
+               switch (optcode) {
+                       case 'h':
+-                              printf(usage_message);
++                              printf("%s", usage_message);
+                               printf("\n");
+-                              printf(help_message);
++                              printf("%s", help_message);
+                               exit(EXIT_SUCCESS);
+ 
+                       case 'f':
+@@ -138,7 +138,7 @@
+                               exit(EXIT_SUCCESS);
+ 
+                       case '?':
+-                              printf(usage_message);
++                              printf("%s", usage_message);
+                               exit(EXIT_SUCCESS);
+ 
+                       case 0:
+@@ -195,7 +195,7 @@
+       }
+       else {
+ #ifndef INLINE_MODE
+-              printf(usage_message);
++              printf("%s", usage_message);
+               exit(EXIT_FAILURE);
+ #endif
+       }