format-security.patch

   1 --- libPropList-0.10.1/util.c.orig      2014-01-14 10:40:09.183601243 +0100
   2 +++ libPropList-0.10.1/util.c   2014-01-14 10:41:31.031533654 +0100
   3 @@ -213,15 +213,15 @@ char *MakeDefaultsFilename()
   4         sprintf(actual_filename, "%s/GNUstep", env);
   5      }
   6    else
   7 -    sprintf(actual_filename, env);
   8 +    strcpy(actual_filename, env);
   9
  10 -  sprintf(&(actual_filename[strlen(actual_filename)]), "/");
  11 +  strcpy(&(actual_filename[strlen(actual_filename)]), "/");
  12
  13    env = (char *)getenv("GNUSTEP_DEFAULTS_FILE");
  14    if(!env)
  15 -    sprintf(&(actual_filename[strlen(actual_filename)]), "Defaults");
  16 +    strcpy(&(actual_filename[strlen(actual_filename)]), "Defaults");
  17    else
  18 -    sprintf(&(actual_filename[strlen(actual_filename)]), env);
  19 +    strcpy(&(actual_filename[strlen(actual_filename)]), env);
  20
  21    return ManglePath(actual_filename);
  22  }