- fix format string errors

- rel 3

diff --git a/format-security.patch b/format-security.patch
new file mode 100644 (file)
index 0000000..4004e7e
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,20 @@
+--- libmpeg3-1.8/mpeg3tocutil.c.orig   2015-03-09 17:39:36.022530554 +0100
++++ libmpeg3-1.8/mpeg3tocutil.c        2015-03-09 17:40:15.672530268 +0100
+@@ -1278,7 +1278,7 @@
+ 
+ // Store file information
+       PUT_INT32(FILE_INFO);
+-      fprintf(file->toc_fd, file->fs->path);
++      fprintf(file->toc_fd, "%s", file->fs->path);
+       for(j = strlen(file->fs->path); j < MPEG3_STRLEN; j++)
+                       fputc(0, file->toc_fd);
+       PUT_INT64(file->source_date);
+@@ -1309,7 +1309,7 @@
+ // Path
+               PUT_INT32(TITLE_PATH);
+ 
+-              fprintf(file->toc_fd, title->fs->path);
++              fprintf(file->toc_fd, "%s", title->fs->path);
+ 
+ // Pad path with 0
+               for(j = strlen(title->fs->path); j < MPEG3_STRLEN; j++)

diff --git a/libmpeg3.spec b/libmpeg3.spec
index 891eac383dd3b3a0ce31676849352c7434ae8983..8abc4bab66a377a4c8292bedba6da6ca56e7e476 100644 (file)
--- a/libmpeg3.spec
+++ b/libmpeg3.spec
@@ -2,12 +2,13 @@ Summary:      LibMPEG3 - decoding of many many derivatives of MPEG standards
 Summary(pl.UTF-8):     LibMPEG3 - dekodowanie wielu alternatywnych standardów MPEG
 Name:          libmpeg3
 Version:       1.8
-Release:       2
+Release:       3
 License:       GPL v2+
 Group:         Libraries
 Source0:       http://downloads.sourceforge.net/heroines/%{name}-%{version}-src.tar.bz2
 # Source0-md5: a9d0d34e8941a4437eb8e7dfe559eca1
 Patch0:                %{name}-acam.patch
+Patch1:                format-security.patch
 URL:           http://heroinewarrior.com/libmpeg3.php
 BuildRequires: a52dec-libs-devel >= 0.7.3
 BuildRequires: autoconf >= 2.50
@@ -88,6 +89,7 @@ MPEG.
 %prep
 %setup -q
 %patch0 -p1
+%patch1 -p1
 
 %build
 %{__libtoolize}