format-security.patch

   1 --- lynx2-8-7/src/HTML.c~       2009-06-23 23:53:58.000000000 +0000
   2 +++ lynx2-8-7/src/HTML.c        2015-01-01 18:21:04.617496824 +0000
   3 @@ -2716,13 +2716,13 @@
   4                     }
   5                 }
   6                 if (seqtype == 'A') {
   7 -                   sprintf(number_string, LYUppercaseA_OL_String(seqnum));
   8 +                   sprintf(number_string, "%s", LYUppercaseA_OL_String(seqnum));
   9                 } else if (seqtype == 'a') {
  10 -                   sprintf(number_string, LYLowercaseA_OL_String(seqnum));
  11 +                   sprintf(number_string, "%s", LYLowercaseA_OL_String(seqnum));
  12                 } else if (seqtype == 'I') {
  13 -                   sprintf(number_string, LYUppercaseI_OL_String(seqnum));
  14 +                   sprintf(number_string, "%s", LYUppercaseI_OL_String(seqnum));
  15                 } else if (seqtype == 'i') {
  16 -                   sprintf(number_string, LYLowercaseI_OL_String(seqnum));
  17 +                   sprintf(number_string, "%s", LYLowercaseI_OL_String(seqnum));
  18                 } else {
  19                     sprintf(number_string, "%2d.", seqnum);
  20                 }