up to 2.72, add -Werror=format-security patch

diff --git a/format-security.patch b/format-security.patch
new file mode 100644 (file)
index 0000000..48298f3
--- /dev/null
+++ b/format-security.patch
@@ -0,0 +1,11 @@
+--- siege-2.72/src/init.c~     2012-02-10 15:52:02.000000000 +0200
++++ siege-2.72/src/init.c      2013-01-29 11:51:56.781782568 +0200
+@@ -48,7 +48,7 @@
+    * use default of ~/.siegerc */
+   if(strcmp(my.rc, "") == 0){
+     if((e = getenv("SIEGERC")) != NULL){
+-      snprintf(my.rc, sizeof(my.rc), e);
++      snprintf(my.rc, sizeof(my.rc), "%s", e); // TODO: maybe strncpy instead if it puts \0 at the end as well
+     } else {
+       snprintf(my.rc, sizeof(my.rc), "%s/.siegerc", getenv("HOME"));
+       if (stat(my.rc, &buf) < 0 && errno == ENOENT) {

diff --git a/siege.spec b/siege.spec
index 5177ba5ac7cd99aa15a36e0a2c747a0b59469cca..d658e59f802bf49c77cf885163c57c78f810593b 100644 (file)
--- a/siege.spec
+++ b/siege.spec
@@ -1,15 +1,16 @@
 Summary:       An HTTP regression testing/benchmarking utility
 Summary(pl.UTF-8):     Narzędzie do testowania serwerów HTTP
 Name:          siege
-Version:       2.69
-Release:       3
+Version:       2.72
+Release:       1
 License:       GPL v2
 Group:         Networking/Utilities
-Source0:       ftp://sid.joedog.org/pub/siege/%{name}-%{version}.tar.gz
-# Source0-md5: 77190ad255dfa14232137d03fd0d994b
+Source0:       http://www.joedog.org/pub/siege/%{name}-%{version}.tar.gz
+# Source0-md5: 6bd0b1dca6b95717e23a6bade9a0a1f4
 Patch0:                %{name}-DESTDIR.patch
 Patch1:                %{name}-am_fixes.patch
 Patch2:                %{name}-config.patch
+Patch3:                format-security.patch
 URL:           http://www.joedog.org/index/siege-home
 BuildRequires: autoconf
 BuildRequires: automake
@@ -42,6 +43,7 @@ użytkownika.
 %patch0 -p1
 %patch1 -p1
 %patch2 -p1
+%patch3 -p1
 
 %build
 rm -f missing